Free NSE7_SDW-7.2 Exam Braindumps
Fortinet NSE 7 - SD-WAN 7.2 Questions 41–45 (page: 10)

Updated On: 10-Feb-2026

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

  1. Encapsulating Security Payload (ESP)
  2. Secure Shell (SSH)
  3. Internet Key Exchange (IKE)
  4. Security Association (SA)

Answer(s): A,C



Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

  1. http
  2. icmp
  3. twamp
  4. dns

Answer(s): A,D

Explanation:

Performance SLA (Service Level Agreement) protocols are used in SD-WAN to monitor the quality and performance of various network services. The two protocols that specifically allow for verifying a specific value in the server response are:

HTTP (Hypertext Transfer Protocol): HTTP is the foundation of data communication on the World Wide Web. It allows for fetching resources, such as HTML documents. You can configure an HTTP performance SLA to send specific requests (e.g., GET or POST) and then check if the response body contains a particular string or value. This is useful for validating web server functionality and content delivery.

DNS (Domain Name System): DNS is responsible for translating domain names into IP addresses. A

DNS performance SLA can be set up to query a specific domain and verify that the returned IP address or other DNS record values match what is expected. This helps ensure proper name resolution and accessibility of resources.





Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

  1. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
  2. The measured bandwidth is less than 100 KBps.
  3. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
  4. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

Answer(s): B,C



Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

  1. get router info routing-table all
  2. diagnose debug application ike
  3. diagnose vpn tunnel list
  4. get ipsec tunnel list

Answer(s): B



Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

  1. The session information output displays no SD-WAN-specific details.
  2. All SD-WAN rules have the default and gateway setting enabled.
  3. Traffic does not match any of the entries in the policy route table.
  4. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

Answer(s): A,C



Viewing page 10 of 21
Viewing questions 46 - 50 out of 99 questions


Post your Comments and Discuss Fortinet NSE7_SDW-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!