Free Access Fortinet.NSE7_SDW-7.2.v2025-10-01.q108 Practice Test (Page 18)

Question 81

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A.Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

B.The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

C.Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

D.London generates an IKE information message that contains the Toronto public IP address.

Question 82

Refer to the exhibit.

Based on the exhibit, which two statements are correct about the health of the selected members? (Choose
two.)

A.FortiGate passively monitors the member if TCP traffic is passing through the member.

B.During passive monitoring, FortiGate can't detect dead members.

C.After FortiGate switches to active mode, FortiGate never fails back to passive monitoring.

D.FortiGate can offload the traffic that is subject to passive monitoring to hardware.

Question 83

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

A.You can reference meta fields.

B.You can configure interfaces as SD-WAN members without having to remove references first.

C.You can configure advanced CLI settings.

D.You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

Question 84

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

A.Set cost 15.

B.Set source 100.64.1.1.

C.Set priority 10.

D.Set load-balance-mode source-ip-ip-based.

Question 85

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A.Changes have been made on firewall policy ID 1 on FortiGate.

B.FortiGate has terminated the session after a change on policy ID 1.

C.The type of traffic defined and allowed on firewall policy ID 1 is UDP.

D.Firewall policy ID 1 has source NAT disabled.

Other Version: 2360Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 1294Fortinet.NSE7_SDW-7.2.v2024-11-26.q94; 1195Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 290Nokia.4A0-113.v2026-05-01.q69; 244EC-COUNCIL.312-49v11.v2026-04-30.q214; 226Microsoft.MB-820.v2026-04-30.q101; 204Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 453EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File