NSE7_SDW-7.2 Free Practice Test

Refer to the exhibit.

Based on the output, which two conclusions are true? (Choose two.)

1. A. There is more than one SD-WAN rule configured.
2. B. The SD-WAN rules take precedence over regular policy routes.
3. C. The all_rules rule represents the implicit SD-WAN rule.
4. D. Entry 1(id=1) is a regular policy route.

Correct Answer: AD

Refer to the exhibit.

An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?

1. A. It is a hub devic
2. B. It can send ADVPN shortcut offers.
3. C. It is a spoke device that establishes dynamic IPsec tunnels to the hu
4. D. The subnet range is 10.10.128.0/23.
5. E. It is a spoke device that establishes dynamic IPsec tunnels to the hu
6. F. It can send ADVPN shortcut requests.
7. G. It is a hub device and will automatically discover the spoke devices that are in the SD- WAN topology.

Correct Answer: C
According to the SD-WAN 7.2 Study Guide, the SD-WAN overlay template simplifies the configuration of IPsec tunnels in a hub-and-spoke topology. The template defines the following parameters:
✑ type: dynamic for spokes, static for hubs
✑ interface: the WAN interface to use for the IPsec tunnel
✑ network-overlay: enable for spokes, disable for hubs
✑ network-id: a unique identifier for each spoke
✑ auto-discovery-sender: enable for hubs, disable for spokes
✑ auto-discovery-receiver: enable for spokes, disable for hubs Based on the exhibit, the FortiGate device has the following configuration:
✑ type: dynamic
✑ interface: port1
✑ network-overlay: enable
✑ network-id: 5
✑ auto-discovery-sender: disable
✑ auto-discovery-receiver: enable
Therefore, the FortiGate device is a spoke that establishes dynamic IPsec tunnels to the hub. It also has the network-overlay and auto-discovery-receiver options enabled, which means it can send ADVPN shortcut requests to other spokes when it receives a shortcut offer from the hub

Which statement is correct about SD-WAN and ADVPN?

1. A. Routes for ADVPN shortcuts must be manually configured.
2. B. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.
3. C. SD-WAN does not monitor the health and performance of ADVPN shortcuts.
4. D. You must use IKEv2 on IPsec tunnels.

Correct Answer: B

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

1. A. FortiGate bounces port5 after it detects all SD-WAN members as dead.
2. B. FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.
3. C. FortiGate brings up port5 after it detects all SD-WAN members as alive.
4. D. FortiGate brings down port5 after it detects all SD-WAN members as dead.

Correct Answer: A

Refer to the exhibit.

Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

1. A. Cost
2. B. Interface member
3. C. Priority
4. D. Gateway IP

Correct Answer: BD