Online Access Free NSE7_SDW-7.2 Practice Test

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

• A.It provides direct connectivity between spokes by creating shortcuts.
• B.It enables spokes to bypass the hub during shortcut negotiation.
• C.It enables spokes to establish shortcuts to third-party gateways.
• D.It provides the benefits of a full-mesh topology in a hub-and-spoke network.

Refer to the exhibit.

Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)

• A.After FortiGate switches to active mode, FortiGate never fails back to passive monitoring.
• B.FortiGate passively monitors the member if TCP traffic is passing through the member.
• C.FortiGate can offload the traffic that is subject to passive monitoring to hardware.
• D.During passive monitoring, FortiGate can't detect dead members.

Refer to the exhibits.

Exhibit A shows a policy package definition Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the Issue?

• A.Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.
• B.Use a metadata variable instead of a dynamic interface to define the firewall policy.
• C.Create dynamic mapping for the LAN interface for all devices in the installation target list.
• D.Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.

Refer to the Exhibits:

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

• A.The dead member interface stays unavailable until an administrator manually brings the interface back.
• B.Static routes using port2 are active in the routing table.
• C.Port2 needs to wait 500 milliseconds to change the status from alive to dead.
• D.FortiGate has not received three consecutive requests from the SLA server configured for port2.

Refer to the exhibit.

Which statement explains the output shown in the exhibit?

• A.FortiGate used192.2.0.1as the gateway for the original direction of the traffic.
• B.FortiGate must re-evaluate the session due to routing change.
• C.FortiGate will not re-evaluate the session following a firewall policy change.
• D.FortiGate performed standard FIB routing on the session.