NSE7_SDW-7.0 Free Practice Test

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

1. A. Enable auxiliary-session under config system settings.
2. B. Disable tp-session-without-syn under config system settings.
3. C. Enable snat-route-change under config system global.
4. D. Disable allow-subnet-overlap under config system settings.

Correct Answer: A
Controlling return path with auxiliary session When multiple incoming or outgoing interfaces are used in ECMP or for load balancing, changes to routing, incoming, or return traffic interfaces impacts how an existing sessions handles the traffic. Auxiliary sessions can be used to handle these changes to traffic
patterns.https://docs.fortinet.com/document/fortigate/7.0.11/administration-guide/14295/controlling-return-path

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.

Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

1. A. London generates an IKE information message that contains the Toronto public IP address.
2. B. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
3. C. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
4. D. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Correct Answer: BD

Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

1. A. The sdwan_service_id flag in the session information is 0.
2. B. All SD-WAN rules have the default setting enabled.
3. C. Traffic does not match any of the entries in the policy route table.
4. D. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

Correct Answer: AC

Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

1. A. http
2. B. icmp
3. C. twamp
4. D. dns

Correct Answer: AD

Refer to the exhibits.
Exhibit A

Exhibit B -

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?

1. A. Port2 becomes alive after three successful probes are detected.
2. B. FortiGate removes all static routes for port2.
3. C. The administrator manually restores the static routes for port2, if port2 becomes alive.
4. D. Host 8.8.8.8 is reachable through port1 and port2.

Correct Answer: B
This is due to Update static route is enable which removes the static route entry referencing the interface if the interface is dead