Free Access Fortinet.NSE7_SDW-7.2.v2025-10-01.q108 Practice Test (Page 4)

Question 11

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

A.You must set ike-version to 1.

B.You must disable idle-timeout.

C.You must enable net-device.

D.You must enable auto-discovery-sender.

Question 12

Refer to the exhibits.
Exhibit A

Exhibit B -

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

A.The traffic will be routed over T_INET_0_0.

B.The traffic will be routed over T_MPLS_0.

C.The traffic will be routed over T_INET_1_0.

D.The traffic will be load balanced across all three overlays.

Question 13

Refer to the exhibits.

Exhibit A shows two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2. Each template defines a VPN tunnel.
Exhibit B shows the error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device.
Which statement best explain the cause for this issue?

A.You can assign only one template with a tunnel of fype static to each FortiGate device

B.You can define only one IPsec tunnel from branch devices to HUB1.

C.You can assign only one IPsec template to each FortiGate device.

D.You should review the branch1_fgt configuration for the already configured tunnel with the name HUB1-VPN2.

Question 14

Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)

A.auto-discovery-forwardermust be enabled on all IPsec VPNs.

B.On the spokes,auto-discovery-receivermust be enabled on the IPsec VPN to the hub.

C.On the hubs,net-devicemust be enabled on all IPsec VPNs.

D.On the hubs,auto-discovery-sendermust be enabled on the IPsec VPNs to spokes.

Question 15

Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)

A.Internet service database (ISDB) address object

B.Application signatures

C.Source and destination IP address

D.Type of physical link connection

E.URL categories

Other Version: 2731Fortinet.NSE7_SDW-7.2.v2025-03-01.q95; 1529Fortinet.NSE7_SDW-7.2.v2024-11-26.q94; 1398Fortinet.NSE7_SDW-7.2.v2024-09-17.q87

Latest Upload: 265Snowflake.DEA-C01.v2026-09-04.q215; 188HP.HPE0-V27.v2026-09-04.q127; 207NAHQ.CPHQ.v2026-09-03.q481; 119SAP.C-S4CPB-2602.v2026-09-02.q7; 128Cisco.700-805.v2026-09-02.q86; 164MSSC.CLT-4.0.v2026-09-02.q43; 132Fitness.NCSF-CPT.v2026-09-02.q18; 203Google.Generative-AI-Leader.v2026-09-02.q77; 147PECB.ISO-14001-Lead-Auditor.v2026-09-01.q39; 136Google.GCP-DE.v2026-09-01.q27

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File