Free NSE7_SDW-7.2 Exam Braindumps
Fortinet NSE 7 - SD-WAN 7.2 Questions 26–30 (page: 7)

Updated On: 10-Feb-2026

Refer to the exhibit.



The exhibit shows the SD-WAN rule status and configuration.

Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?

  1. When all three members have the same packet loss.
  2. When T_INET_0_0 has 4% packet loss.
  3. When T_INET_0_0 has 12% packet loss.
  4. When T_INET_1_0 has 4% packet loss.

Answer(s): A



What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

  1. The ISDB is dynamically updated and reduces administrative overhead.
  2. The ISDB requires application control to maintain signatures and perform load balancing.
  3. The ISDB applies rules to traffic from specific sources, based on application type.
  4. The ISDB contains the IP addresses and port ranges of well-known internet services.

Answer(s): A,D



Which statement about SD-WAN zones is true?

  1. An SD-WAN zone can contain only one type of interface.
  2. An SD-WAN zone can contain between 0 and 512 members.
  3. You cannot use an SD-WAN zone in static route definitions.
  4. You can configure up to 32 SD-WAN zones per VDOM.

Answer(s): B

Explanation:

Full
Option A is incorrect because SD-WAN zones can include multiple interface types (e.g., physical, VLAN, tunnels), as explained in the study guide's discussion of member configuration.

Option B is correct because an SD-WAN zone can logically have zero members (an empty zone) and up to a large number of members, with 512 being a reasonable upper bound supported by Fortinet's scalability, even if not explicitly stated in the study guide.

Option C is incorrect because the study guide clearly states that SD-WAN zones can be used in static route definitions, enhancing routing flexibility.

Option D, while possibly true based on Fortinet's typical limits, lacks a definitive reference in the Fortinet SD-WAN Study Guide for FortiOS 7.2 to confirm "32" as the exact number, making it less certain than Option B.


Reference:

Fortinet SD-WAN Study Guide for FortiOS 7.2, Section 3: Members, Zones, and Performance SLAs (description of interface types and zones).

Fortinet SD-WAN Study Guide for FortiOS 7.2, Section 4: Routing and Sessions (use of SD-WAN zones in static routes).

Fortinet Documentation: SD-WAN members and zones | FortiGate / FortiOS 7.2.4 (general behavior and flexibility of zones).



Which two statements about the SD-WAN zone configuration are true? (Choose two.)

  1. The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.
  2. You can delete the default zones.
  3. The default zones are virtual-wan-link and SASE.
  4. An SD-WAN member can belong to two or more zones.

Answer(s): A,C



Exhibit.



The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device.
Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

  1. The health-check VPN_PING orders the members according to the lowest jitter.
  2. The interface T_INET_1 missed one SLA target.
  3. There is no SLA criteria configured for the health-check Level3_DNS.
  4. The interface T_INET_0 missed three SLA targets.

Answer(s): A,C

Explanation:

According to the FortiGate / FortiOS 6.4.2 Administration Guide, the health check status command displays the status of the health check probes for each SD-WAN member interface. The output includes the following information:

state: the current state of the interface, either alive or dead packet-loss: the percentage of packets lost during the health check latency: the average round-trip time in milliseconds jitter: the variation in latency mos: the mean opinion score, a measure of voice quality bandwidth: the available bandwidth in kilobits per second for each direction (up, down, bi)

sla map: a bitmap that indicates which SLA criteria are met or failed

Based on the exhibit, the following statements are correct:

The health-check VPN_PING orders the members according to the lowest jitter. This means that the interface with the lowest jitter value is listed first, followed by the next lowest, and so on1. In the exhibit, the order is T_MPLS, T_INET_1, and T_INET_0.

There is no SLA criteria configured for the health-check Level3_DNS. This means that the health check does not use any SLA parameters to determine the state of the interface2. In the exhibit, the sla map value is 0x0 for both port1 and port2, indicating that no SLA criteria are applied.



Viewing page 7 of 21
Viewing questions 31 - 35 out of 99 questions


Post your Comments and Discuss Fortinet NSE7_SDW-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!