Question No. 1

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

AFortiGate does not consider the source address of the packet when matching an SD-WAN rule for local-out traffic.

BBy default, local-out traffic does not use SD-WAN.

CBy default, FortiGate does not check if the selected member has a valid route to the destination.

DYou must configure each local-out feature individually, to use SD-WAN.

Show Answer

Correct Answer: B, D

Question No. 2

What is true about SD-WAN multiregion topologies?

AEach region has its own SD-WAN topology

BIt is not compatible with ADVPN.

CRegions must correspond to geographical areas.

DRouting between the hub and spokes must be BGP.

Show Answer

Correct Answer: A

Question No. 3

Which two statements about SD-WAN central management are true? (Choose two.)

AThe objects are saved in the ADOM common object database.

BIt does not support meta fields.

CIt uses templates to configure SD-WAN on managed devices.

DIt supports normalized interfaces for SD-WAN member configuration.

Show Answer

Correct Answer: A, C

Normalized interfaces are not supported for SD-WAN templates. You can create multiple SD-WAN zones and add interface members to the SD-WAN zones. You must bind the interface members by name to physical interfaces or VPN interfaces.https://docs.fortinet.com/document/fortigate/7.0.0/sd-wan-new-features/794804/new-sd-wan-template-fmg

Question No. 4

Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?

AThe original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.

BThe reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

CThe original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.

DThe original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

Show Answer

Correct Answer: D

Question No. 5

Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)

AType of physical link connection

BInternet service database (ISDB) address object

CSource and destination IP address

DURL categories

EApplication signatures

Show Answer

Correct Answer: B, C, E

Free Fortinet NSE7_SDW-7.2 Exam Actual Questions

The questions for NSE7_SDW-7.2 were last updated On Jan 18, 2025