NSE7_SDW-7.2 Free Practice Test

Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

1. A. http
2. B. icmp
3. C. twamp
4. D. dns

Correct Answer: AD
Performance SLA (Service Level Agreement) protocols are used in SD-WAN to monitor the quality and performance of various network services. The two protocols that specifically allow for verifying a specific value in the server response are:
✑ HTTP (Hypertext Transfer Protocol): HTTP is the foundation of data communication on the World Wide Web. It allows for fetching resources, such as HTML documents. You can configure an HTTP performance SLA to send specific requests (e.g., GET or POST) and then check if the response body contains a particular string or value. This is useful for validating web server functionality and content delivery.
✑ DNS (Domain Name System): DNS is responsible for translating domain names into IP addresses. A DNS performance SLA can be set up to query a specific domain and verify that the returned IP address or other DNS record values match what is expected. This helps ensure proper name resolution and accessibility of resources.

Refer to the exhibit.

In a dual-hub hub-and-spoke SD-WAN deployment, which is a benefit of disabling the anti- replay setting on the hubs?

1. A. It instructs the hub to disable the reordering of TCP packets on behalf of the receiver, to improve performance.
2. B. It instructs the hub to disable TCP sequence number check, which is required for TCP sessions originated from spokes to fail over back and forth between the hubs.
3. C. It instructs the hub to not check the ESP sequence numbers on IPsec traffic, to improve performance.
4. D. It instructs the hub to skip content inspection on TCP traffic, to improve performance.

Correct Answer: B

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

1. A. The gateway address of their IPsec interfaces
2. B. The tunnel ID of their IPsec interfaces
3. C. The IP address of their IPsec interfaces
4. D. The name of their IPsec interfaces

Correct Answer: C

Which two statements about the SD-WAN zone configuration are true? (Choose two.)

1. A. The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.
2. B. You can delete the default zones.
3. C. The default zones are virtual-wan-link and SASE.
4. D. An SD-WAN member can belong to two or more zones.

Correct Answer: AC

Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)

1. A. Each BGP route is three hops away from the destination.
2. B. ibgp-multipath is disabled.
3. C. additional-path is enabled.
4. D. You can run the get router info routing-table database command to display the additional paths.

Correct Answer: CD