Question 1

Refer to the exhibit.
Based on the output, which two conclusions are true? (Choose two.)

Accepted Answer

Correct answer: AD

Question 2

Which diagnostic command can you use to show the SD-WAN rules, interface information, and state?

Accepted Answer

Correct answer: A

Question 3

Refer to the exhibits.
Exhibit A
Exhibit B
Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority
on port2 to 20? (Choose two.)

Accepted Answer

Correct answer: BD

Question 4

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

Accepted Answer

Correct answer: AD

Question 5

Refer to the exhibit.
An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation
preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?

Accepted Answer

According to the SD-WAN 7.2 Study Guide, the SD-WAN overlay template simplifies the configuration of IPsec tunnels in a hub-and-spoke topology. The template
defines the following parameters:
? type: dynamic for spokes, static for hubs
? interface: the WAN interface to use for the IPsec tunnel
? network-overlay: enable for spokes, disable for hubs
? network-id: a unique identifier for each spoke
? auto-discovery-sender: enable for hubs, disable for spokes
? auto-discovery-receiver: enable for spokes, disable for hubs Based on the exhibit, the FortiGate device has the following configuration:
? type: dynamic
? interface: port1
? network-overlay: enable
? network-id: 5
? auto-discovery-sender: disable
? auto-discovery-receiver: enable
Therefore, the FortiGate device is a spoke that establishes dynamic IPsec tunnels to the hub. It also has the network-overlay and auto-discovery-receiver options
enabled, which means it can send ADVPN shortcut requests to other spokes when it receives a shortcut offer from the hub

Question 6

Refer to the Exhibits:

Certshared now are offering 100% pass ensure NSE7_SDW-7.2 dumps!
/exam/NSE7_SDW-7.2/ (0 Q&As)
Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

Accepted Answer

Correct answer: C

Question 7

Refer to the exhibit.
Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

Accepted Answer

Correct answer: AC

Question 8

Certshared now are offering 100% pass ensure NSE7_SDW-7.2 dumps!
/exam/NSE7_SDW-7.2/ (0 Q&As)
Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

Accepted Answer

Correct answer: AB

Question 9

Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

Accepted Answer

FortiGate not to flag existing impacted session as dirty by setting firewall-session-dirty to check new. The results is that FortiGate evaluates only new session
against the new firewall policy.

Question 10

Refer to the exhibits.
Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B
shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP
echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

Certshared now are offering 100% pass ensure NSE7_SDW-7.2 dumps!
/exam/NSE7_SDW-7.2/ (0 Q&As)

Accepted Answer

Correct answer: AD