Free Access Fortinet.NSE7_SDW-7.2.v2025-10-01.q108 Practice Test (Page 15)

Question 66

Refer to the exhibits.

Exhibit A shows two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2. Each template defines a
VPN tunnel.
Exhibit B shows the error message that FortiManager displayed when the administrator tried to assign the
second template to the FortiGate device.
Which statement best explain the cause for this issue?

A.You can assign only one template with a tunnel of fype static to each FortiGate device

B.You can define only one IPsec tunnel from branch devices to HUB1.

C.You can assign only one IPsec template to each FortiGate device.

D.You should review the branch1_fgt configuration for the already configured tunnel with the name HUB1-VPN2.

Question 67

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

A.FortiGate does not consider the source address of the packet when matching an SD-WAN rule for
local-out traffic.

B.By default, FortiGate does not check if the selected member has a valid route to the destination.

C.You must configure each local-out feature individually, to use SD-WAN.

D.By default, local-out traffic does not use SD-WAN.

Question 68

Which statement about using BGP routes in SD-WAN is true?

A.Learned routes can be used as dynamic destinations in SD-WAN rules.

B.You must configure AS path prepending.

C.You must use external BGP.

D.You must use BGP to route traffic for both overlay and underlay links.

Question 69

Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

A.The number of simultaneous connections among all source IP addresses cannot exceed five connections.

B.The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

C.The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

D.The number of simultaneous connections allowed for each source IP address cannot exceed five connections.

Question 70

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A.The type of traffic defined and allowed on firewall policy ID 1 is UDP.

B.Changes have been made on firewall policy ID 1 on FortiGate.

C.Firewall policy ID 1 has source NAT disabled.

D.FortiGate has terminated the session after a change on policy ID 1.

Other Version: 2360Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 1296Fortinet.NSE7_SDW-7.2.v2024-11-26.q94; 1198Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 290Nokia.4A0-113.v2026-05-01.q69; 246EC-COUNCIL.312-49v11.v2026-04-30.q214; 226Microsoft.MB-820.v2026-04-30.q101; 205Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 454EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483

Question 66

Question 67

Question 68

Question 69

Question 70

Download PDF File