Free NSE7_SDW-7.2 Practice Exam Questions

Refer to the exhibit.

The exhibit shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?

A. When all three members have the same packet loss.

B. When T_INET_0_0 has 4% packet loss.

C. When T_INET_0_0 has 12% packet loss.

D. When T_INET_1_0 has 4% packet loss.

Exhibit.

The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

A. The health-check VPN_PING orders the members according to the lowest jitter.

B. The interface T_INET_1 missed one SLA target.

C. There is no SLA criteria configured for the health-check Level3_DNS.

D. The interface T_INET_0 missed three SLA targets.

A. The health-check VPN_PING orders the members according to the lowest jitter.

C. There is no SLA criteria configured for the health-check Level3_DNS.

Explanation:
According to the FortiGate / FortiOS 6.4.2 Administration Guide, the health check status command displays the status of the health check probes for each SD-WAN member interface.

The output includes the following information:

State: the current state of the interface, either alive or dead
Packet-loss: the percentage of packets lost during the health check
Latency: the average round-trip time in milliseconds
Jitter: the variation in latency
Mos: the mean opinion score, a measure of voice quality
Bandwidth: the available bandwidth in kilobits per second for each direction (up, down, bi)
Sla map: a bitmap that indicates which SLA criteria are met or failed

Based on the exhibit, the following statements are correct:

The health-check VPN_PING orders the members according to the lowest jitter. This means that the interface with the lowest jitter value is listed first, followed by the next lowest, and so on1. In the exhibit, the order is T_MPLS, T_INET_1, and T_INET_0.

There is no SLA criteria configured for the health-check Level3_DNS. This means that the health check does not use any SLA parameters to determine the state of the interface2. In the exhibit, the sla map value is 0x0 for both port1 and port2, indicating that no SLA criteria are applied.

Which two statements about SD-WAN central management are true? (Choose two.)

A. It does not allow you to monitor the status of SD-WAN members.

B. It is enabled or disabled on a per-ADOM basis.

C. It is enabled by default.

D. It uses templates to configure SD-WAN on managed devices.

B. It is enabled or disabled on a per-ADOM basis.

D. It uses templates to configure SD-WAN on managed devices.

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

A. The gateway address of their IPsec interfaces

B. The tunnel ID of their IPsec interfaces

C. The IP address of their IPsec interfaces

D. The name of their IPsec interfaces

C. The IP address of their IPsec interfaces

Refer to the exhibit.

Which statement explains the output shown in the exhibit?

A. FortiGate performed standard FIB routing on the session.

B. FortiGate will not re-evaluate the session following a firewall policy change.

C. FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.

D. FortiGate must re-evaluate the session due to routing change.

Explanation:

The snat-route-change option is enabled by default. This option enables FortiGate to reevaluate the routing table and select a new egress interface if the next hop IP address changes. This option only applies to sessions in the dirty state. Sessions in the log state are not affected by routing changes.

NSE7_SDW-7.2 Practice Test