Question No. 1

In which SD-WAN template field can you use a metadata variable?

AYou can use metadata variables only to define interface members and the gateway IP.

BAll SD-WAN template fields support metadata variables.

CAny field Identified with a dollar sign ($) in a magnifying glass.

DAny field identified with an 'M' in a circle.

Show Answer

Correct Answer: B

Question No. 2

Which two statements about SD-WAN central management are true? (Choose two.)

AIt does not allow you to monitor the status of SD-WAN members.

BIt is enabled or disabled on a per-ADOM basis.

CIt is enabled by default.

DIt uses templates to configure SD-WAN on managed devices.

Show Answer

Correct Answer: B, D

Question No. 3

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

AThe traffic shaper drops packets if the bandwidth is less than 2500 KBps.

BThe measured bandwidth is less than 100 KBps.

CThe traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

DThe traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

Show Answer

Correct Answer: B, C

Question No. 4

Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)

AIt creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.

BIt dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.

CIt ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.

DIt provides direct connectivity between all sites by creating on-demand tunnels between spokes.

Show Answer

Correct Answer: C, D

Question No. 5

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

Aget router info routing-table all

Bdiagnose debug application ike

Cdiagnose vpn tunnel list

Dget ipsec tunnel list

Show Answer

Correct Answer: B

IKE real-time debug - useful when debugging ADVPN shortcut messages and spoke-to-spoke negotiations.

* diagnose debug console timestamp enable

* diagnose vpn ike log filter clear

* diagnose vpn ike log filter mdst-addr4 <ip.of.hub> <ip.of.spoke>

* diagnose debug application ike -1

* diagnose debug enable

Free Fortinet NSE7_SDW-7.2 Exam Actual Questions