Fortinet NSE7_SDW-7.2 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibits.

Exhibit A -

q1_NSE7_SDW-7.2

Exhibit B -

q1_NSE7_SDW-7.2

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.

The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.

Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

ADestination internet service must be enabled on the traffic shaping policy.

BApplication control must be enabled on the firewall policy.

CWeb filtering must be enabled on the firewall policy.

DIndividual SD-WAN members must be selected as the outgoing interface on the traffic shaping policy.

Show Answer

Question: 2

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

q2_NSE7_SDW-7.2

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

AYou must set ike-version to 1.

BYou must enable net-device.

CYou must enable auto-discovery-sender.

DYou must disable idle-timeout.

Show Answer

Question: 3

Refer to the exhibit.

q3_NSE7_SDW-7.2

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

AThe type of traffic defined and allowed on firewall policy ID 1 is UDP.

BFortiGate has terminated the session after a change on policy ID 1.

CChanges have been made on firewall policy ID 1 on FortiGate.

DFirewall policy ID 1 has source NAT disabled.

Show Answer

Question: 4

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

AInterface-based shaping mode

BReverse-policy shaping mode

CShared-policy shaping mode

DPer-IP shaping mode

Show Answer

Question: 5

Refer to the exhibit.

q5_NSE7_SDW-7.2

Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

Atype must be set to static.

Bmode-cfg must be enabled.

Cexchange-interface-ip must be enabled.

Dadd-route must be disabled.

Show Answer

Fortinet NSE7_SDW-7.2 Quiz:1 Topic:1 Questions:1-5