Online Access Free NSE7_SSE_AR-26 Practice Test

Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD- WAN rule that steers Facebook and Linkedin traffic through the less costly internet link. The FortiGate GUI page appears as shown in the exhibit. What should you do to set Facebook and LinkedIn as destinations?

Exhibit 1

• A.In the Internet service field, select Facebook and LinkedIn.
• B.Install a license to allow applications as destinations of SD-WAN rules.
• C.Enable the applications as destinations of the SD-WAN rule feature visibility.
• D.You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

An administrator configures the performance service-level agreement (SLA) with the probe mode, Passive.
What are two observable impacts of this configuration? (Choose two.)

• A.FortiGate passively monitors the member if TCP traffic is passing through the member.
• B.The performance SLA measures the performance only on the preferred link.
• C.FortiGate can offload traffic subject to passive monitoring to hardware.
• D.FortiGate passively monitors the member if ICMP traffic is passing through the member.
• E.The SLA performance falls back to active monitoring when no traffic has been detected for 3 minutes.

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company ' s SD-WAN hub. Which overlay routing configuration should you use?

• A.BGP on loopback with IPsec phase 2 selectors for ADVPN shortcut routing.
• B.BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.
• C.BGP on loopback with dynamic BGP for ADVPN shortcut routing.
• D.BGP per overlay with dynamic BGP for ADVPN shortcut routing.

When you deploy SD-WAN, you can choose from several common designs. Each design best applies to specific contexts. Which two statements correctly associate a common SD-WAN design with its main indication or constraint? Choose two answers.

• A.Use remote breakout to centralize traffic inspection and limit local management requirements.
• B.Use a direct internet access (DIA) design to increase the traffic security and allow local devices with limited capabilities.
• C.Use a cloud on-ramp topology to improve the performance of cloud applications.
• D.Use a standalone design for sites with only one WAN link to the cloud.

Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

Exhibit 1

• A.When HUB1-VPN3 has 4% packet loss
• B.When HUB1-VPN1 has 4% packet loss
• C.When all three members have the same packet loss
• D.When HUB1-VPN1 has 12% packet loss