NSE7_SDW-7.2 Practice Test

Refer to the exhibits.

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration. Based on the exhibits, which two statements are correct? (Choose two.)

A. FortiGate updated the outgoing interface list on the rule so it prefers port2.

B. Port2 has the highest member priority.

C. Port2 has a lower latency than port1.

D. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.

B. FortiGate has terminated the session after a change on policy ID 1.

C. Changes have been made on firewall policy ID 1 on FortiGate.

D. Firewall policy ID 1 has source NAT disabled.

Refer to the exhibits.

Exhibit A shows the SD-WAN rule status and the learned BGP routes with community 65000:10. Exhibit B shows the SD-WAN rule configuration, the BGP neighbor configuration, and the route map configuration. The administrator wants to steer corporate traffic using routes tags in the SD-WAN rule ID 1. However, the administrator observes that the corporate traffic does not match the SD-WAN rule ID 1. Based on the exhibits, which configuration change is required to fix issue?

A. In the dcl-lab-rm route map configuration, set set-route-tag to 10.

B. In SD-WAN rule ID 1, change the destination to use ISDB entries.

C. In the BGP neighbor configuration, apply the route map dcl-lab-rm in the outbound direction.

D. In the dcl-lab-rm route map configuration, unset match-community.

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SDWAN rules?

A. All traffic from a source IP to a destination IP is sent to the same interface.

B. All traffic from a source IP is sent to the same interface.

C. All traffic from a source IP is sent to the most used interface.

D. All traffic from a source IP to a destination IP is sent to the least used interface.

What are two benefits of using forward error correction (FEC) in IPsec VPNs? (Choose two.)

A. FEC supports hardware offloading.

B. FEC improves reliability of noisy links.

C. FEC transmits parity packets that can be used to reconstruct packet loss.

D. FEC can leverage multiple IPsec tunnels for parity packets transmission.