Free Access Fortinet.NSE7_SDW-7.2.v2025-10-01.q108 Practice Test (Page 22)

Question 101

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true?
(Choose two.)

A.The phase 1 configuration supports the network-overlay setting. Most Voted

B.Dead peer detection is disabled.

C.FortiGate does not install IPsec static routes for remote protected networks in the routing table. Most Voted

D.FortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.

Question 102

Which statement about SD-WAN zones is true?

A.An SD-WAN zone can contain only one type of interface.

B.You cannot use an SD-WAN zone in static route definitions.

C.You can configure up to 32 SD-WAN zones per VDOM.

D.An SD-WAN zone can contain between 0 and 512 members.

Question 103

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

A.All traffic from a source IP to a destination IP is sent to the same interface.

B.All traffic from a source IP is sent to the same interface.

C.All traffic from a source IP is sent to the most used interface.

D.All traffic from a source IP to a destination IP is sent to the least used interface.

Question 104

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

A.FortiGate flags the sessions as dirty.

B.FortiGate performs a route lookup for the original traffic only.

C.FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

D.FortiGate continues routing the sessions with no SNAT, over port2.

Question 105

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The
administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A.Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

B.Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

C.London generates an IKE information message that contains the Toronto public IP address.

D.The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Other Version: 3087Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 1731Fortinet.NSE7_SDW-7.2.v2024-11-26.q94; 1605Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 130Veeam.VMCE_v12.v2026-10-24.q119; 142API.API-510.v2026-10-24.q84; 119AIChE.CCPSC.v2026-10-24.q41; 159CIPS.L4M5.v2026-10-24.q263; 136InsuranceLicensing.InsNV_Health02.v2026-10-23.q44; 220Juniper.JN0-452.v2026-10-23.q141; 277EC-COUNCIL.312-38.v2026-10-22.q321; 146WGU.Health-Fitness-and-Wellness.v2026-10-21.q14; 177ISACA.COBIT-Design-and-Implementation.v2026-10-21.q57; 201NACE.NACE-CIP2-001.v2026-10-21.q36

Question 101

Question 102

Question 103

Question 104

Question 105

Download PDF File