Free Access Fortinet.NSE7_SDW-7.2.v2024-11-26.q94 Practice Test (Page 16)

Question 71

Refer to the exhibit.

An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?

A.It is a hub device. It can send ADVPN shortcut offers.

B.It is a spoke device that establishes dynamic IPsec tunnels to the hub. The subnet range is
10.10.128.0/23.

C.It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send ADVPN shortcut requests.

D.It is a hub device and will automatically discover the spoke devices that are in the SD-WAN topology.

Question 72

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

A.Set cost 15.

B.Set load-balance-mode source-ip-ip-based.

C.Set priority 10.

D.Set source 100.64.1.1.

Question 73

Which statement is correct about SD-WAN and ADVPN?

A.SD-WAN does not monitor the health and performance of ADVPN shortcuts.

B.You must use IKEv2 on IPsec tunnels.

C.Routes for ADVPN shortcuts must be manually configured.

D.SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

Question 74

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

A.All traffic from a source IP to a destination IP is sent to the same interface.

B.All traffic from a source IP is sent to the same interface.

C.All traffic from a source IP is sent to the most used interface.

D.All traffic from a source IP to a destination IP is sent to the least used interface.

Question 75

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true?
(Choose two.)

A.FortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.

B.FortiGate does not install IPsec static routes for remote protected networks in the routing table. Most Voted

C.The phase 1 configuration supports the network-overlay setting. Most Voted

D.Dead peer detection is disabled.

Other Version: 2309Fortinet.NSE7_SDW-7.2.v2025-10-01.q108; 3048Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 1590Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 171PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44; 343Cisco.300-420.v2026-10-17.q324; 204Salesforce.MCE-Con-201.v2026-10-15.q108; 187EMC.NCA.v2026-10-15.q25; 287Apple.Apple-Device-Support.v2026-10-15.q159; 196F5.F5CAB3.v2026-10-14.q47; 190Oracle.1Z0-1048-25.v2026-10-14.q67; 268Cisco.300-730.v2026-10-14.q199; 263Salesforce.Sales-Admn-202.v2026-10-14.q160; 178ServSafe.ServSafe-Manager.v2026-10-13.q32

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File