QUESTION: 21

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

Enable auxiliary-session under config system settings.
Disable tp-session-without-syn under config system settings.
Enable snat-route-change under config system global.
Disable allow-subnet-overlap under config system settings.

Answer(s): A

Explanation:

Controlling return path with auxiliary session When multiple incoming or outgoing interfaces are used in ECMP or for load balancing, changes to routing, incoming, or return traffic interfaces impacts how an existing sessions handles the traffic. Auxiliary sessions can be used to handle these changes to traffic patterns.https://docs.fortinet.com/document/fortigate/7.0.11/administration- guide/14295/controlling-return-path-with-auxiliary-session

Reveal Solution Next Question

QUESTION: 22

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?

Port2 becomes alive after three successful probes are detected.
FortiGate removes all static routes for port2.
The administrator manually restores the static routes for port2, if port2 becomes alive.
Host 8.8.8.8 is reachable through port1 and port2.

Answer(s): B

Explanation:

This is due to Update static route is enable which removes the static route entry referencing the interface if the interface is dead

Reveal Solution Next Question

QUESTION: 23

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Interface-based shaping mode
Reverse-policy shaping mode
Shared-policy shaping mode
Per-IP shaping mode

Answer(s): A

Explanation:

Interface-based shaping goes further, enabling traffic controls based on percentage of the interface bandwidth.

Reveal Solution Next Question

QUESTION: 24

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN

rules?

All traffic from a source IP to a destination IP is sent to the same interface.
All traffic from a source IP is sent to the same interface.
All traffic from a source IP is sent to the most used interface.
All traffic from a source IP to a destination IP is sent to the least used interface.

Answer(s): A

Reveal Solution Next Question

Free NSE7_SDW-7.0 Exam Braindumps (page: 6)

QUESTION: 21

Explanation:

QUESTION: 22

Explanation:

QUESTION: 23

Explanation:

QUESTION: 24