Free Access Fortinet.NSE7_SDW-7.2.v2025-10-01.q108 Practice Test (Page 2)

Question 1

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when
performing IKE negotiation? (Choose two )

A.A total of six packets are exchanged between an initiator and a responder instead of three packets.

B.XAuth is enabled as an additional level of authentication, which requires a username and password.

C.A peer ID is included in the first packet from the initiator, along with suggested security policies.

D.The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Question 2

Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths.
However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

A.Setadvertisement-intervalto the number of additional paths to advertise

B.Setadditional-pathtosend

C.Enableroute-reflector-client

D.Setadv-additional-pathto the number of additional paths to advertise

E.Enablesoft-reconfiguration

Question 3

Refer to the exhibit.

An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke
SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which
statement best describes the configuration applied to the FortiGate device?

A.It is a hub device. It can send ADVPN shortcut offers.

B.It is a spoke device that establishes dynamic IPsec tunnels to the hub. The subnet range is
10.10.128.0/23.

C.It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send ADVPN shortcut
requests.

D.It is a hub device and will automatically discover the spoke devices that are in the SD-WAN topology.

Question 4

Refer to the exhibit.

The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?

A.When T_N1PLS_0 has a latency of 80 ms.

B.When T_INET_0_0 and T_MPLS_0 have the same latency.

C.When T_INET_0_0 has a latency of 250 ms.

D.When T_MPLS_0 has a latency of 100 ms.

Question 5

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

A.diagnose debug application ike

B.get ipsec tunnel list

C.diagnose vpn tunnel list

D.get router info routing-table all

Other Version: 1786Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 941Fortinet.NSE7_SDW-7.2.v2024-11-26.q94; 916Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 111PaloAltoNetworks.NetSec-Pro.v2025-11-15.q20; 124EMC.D-PE-FN-01.v2025-11-14.q18; 159SHRM.SHRM-SCP.v2025-11-14.q144; 276EXIN.ITIL.v2025-11-14.q416; 128Oracle.1z1-830.v2025-11-13.q29; 199ASQ.CMQ-OE.v2025-11-13.q421; 149Fortinet.NSE7_LED-7.0.v2025-11-13.q47; 149Salesforce.MCE-Admn-201.v2025-11-12.q57; 196Salesforce.Marketing-Cloud-Account-Engagement-Specialist.v2025-11-12.q194; 132ITIL.ITIL4-DPI.v2025-11-12.q14

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File