Fortinet Exam NSE7_SDW-7.2 Topic 1 Question 7 Discussion

Actual exam question for Fortinet's NSE7_SDW-7.2 exam

Question #: 7
Topic #: 1

Refer to the exhibit.

The exhibit shows output of the command diagnose 3vg sdwan service collected on a FortiGate device.

The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HO servers 10.0.0.1.

Based on the exhibits, which two statements are correct? (Choose two.)

AWhen FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

BFortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

CThere is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.

DFortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Show Suggested Answer

Suggested Answer: A, B

The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. Reference: The benefits of using IPsec recommended templates are outlined in Fortinet's SD-WAN documentation, which emphasizes the importance of consistency and adherence to recommended configurations.

by Harrison at Apr 25, 2024, 03:43 PM

Limited Time Offer

25%

Off

Get Premium NSE7_SDW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephanie

24 days ago

I'm just glad I don't have to diagnose any FortiGate devices on this exam. That looks like a headache waiting to happen!

upvoted 0 times

...

Sherita

26 days ago

Hmm, this is a tricky one. I'm going to go with Option A and B. If FortiGate can't recognize the application, it'll steer the traffic according to service rule 3. But it also uses service rule 1 for HO servers, so both port1 and port2 are options.

upvoted 0 times

...

Clarence

30 days ago

Haha, I bet the exam writer thought they were really clever with this one. But Option D is the right answer - FortiGate steers the traffic for business applications according to service rule 2 and uses port2.

upvoted 0 times

Theron

4 days ago

I think you're right. FortiGate steers traffic for business applications according to service rule 2 and uses port2.

upvoted 0 times

...

Deonna

5 days ago

I agree, Option D is correct. FortiGate steers traffic for business applications according to service rule 2 and uses port2.

upvoted 0 times

...

2 months ago

Option B is correct. The exhibit shows that FortiGate will steer the traffic to HO servers according to service rule 1, using port1 or port2 since both interfaces are selected.

upvoted 0 times

Renea

20 days ago

Yes, it uses port1 or port2 because both interfaces are selected.

upvoted 0 times

...

Winfred

22 days ago

I agree, option B is correct. FortiGate will steer the traffic to HO servers according to service rule 1.

upvoted 0 times

...

Leah

2 months ago

But based on the exhibit, it clearly shows that FortiGate steers traffic to HO servers according to service rule 1 and uses port1 or port2, so B must be correct.

upvoted 0 times

...

Ernest

2 months ago

I disagree, I believe the correct answers are B and D.

upvoted 0 times

...

Leah

2 months ago

I think the correct answers are A and C.

upvoted 0 times

...