Category NSE7_SDW-7.0

QUESTION 17
Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

QUESTION 18
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

QUESTION 19
Refer to the exhibits.


Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

QUESTION 20
Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)

QUESTION 21
Which two statements about SD-WAN central management are true? (Choose two.)

QUESTION 22
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferredmember in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

QUESTION 23
Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device?
(Choose two.)

QUESTION 24
In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

QUESTION 25
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

QUESTION 26
Which are two benefits of using CLI templates in FortiManager? (Choose two.)

QUESTION 27

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

QUESTION 28
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

QUESTION 29
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?

QUESTION 30
Refer to the exhibit.

Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

QUESTION 31
Refer to the exhibit.

Which statement explains the output shown in the exhibit?