Free NSE7_SDW-7.2 Exam Braindumps
Fortinet NSE 7 - SD-WAN 7.2 Questions 31–35 (page: 8)

Updated On: 10-Feb-2026

Refer to the exhibits.

Exhibit A



Exhibit B -



Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.

The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.

Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

  1. The traffic will be load balanced across all three overlays.
  2. The traffic will be routed over T_INET_0_0.
  3. The traffic will be routed over T_MPLS_0.
  4. The traffic will be routed over T_INET_1_0.

Answer(s): D



Exhibit.



The exhibit shows VPN event logs on FortiGate. In the output shown in the exhibit, which statement is true?

  1. There are no IPsec tunnel statistics log messages for ADVPN cuts.
  2. There is one shortcut tunnel built from master tunnel T_MPLS_0.
  3. The VPN tunnel T_MPLS_0 is a shortcut tunnel.
  4. The master tunnel T_INET_0 cannot accept the ADVPN shortcut.

Answer(s): C



Refer to the exhibits.

Exhibit A



Exhibit B



Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.

Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

  1. FortiGate flags the sessions as dirty.
  2. FortiGate continues routing the sessions with no SNAT, over port2.
  3. FortiGate performs a route lookup for the original traffic only.
  4. FortiGate updates the gateway information of the sessions with SNAT so that they use port1
    instead of port2.

Answer(s): A,D



What is the route-tag setting in an SD-WAN rule used for?

  1. To indicate the routes for health check probes.
  2. To indicate the destination of a rule based on learned BGP prefixes.
  3. To indicate the routes that can be used for routing SD-WAN traffic.
  4. To indicate the members that can be used to route SD-WAN traffic.

Answer(s): B

Explanation:

"Configure SD-WAN *rules* to steer traffic to members only if routes have a specific route-tag." Agree with Cyril - although A says the largely same thing as D, route-tag specifically get used by the SD-WAN rule to determine next-hop (i.e., destination). SG p 142 shows "how an administrator can use [route-]tags in SD-WAN rules."





Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub
2. The administrator configured ADVPN on both hub-and-spoke groups.

Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

  1. London generates an IKE information message that contains the Toronto public IP address.
  2. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
  3. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
  4. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Answer(s): B,D



Viewing page 8 of 21
Viewing questions 36 - 40 out of 99 questions


Post your Comments and Discuss Fortinet NSE7_SDW-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!