Fortinet Exam NSE7_SDW-7.2 Topic 5 Question 30 Discussion

Actual exam question for Fortinet's NSE7_SDW-7.2 exam

Question #: 30
Topic #: 5

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.

The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.

Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

ADestination internet service must be enabled on the traffic shaping policy.

BApplication control must be enabled on the firewall policy.

CWeb filtering must be enabled on the firewall policy.

DIndividual SD-WAN members must be selected as the outgoing interface on the traffic shaping policy.

Show Suggested Answer

Suggested Answer: A, B

The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. Reference: The benefits of using IPsec recommended templates are outlined in Fortinet's SD-WAN documentation, which emphasizes the importance of consistency and adherence to recommended configurations.

by William at Mar 07, 2025, 01:10 PM

Limited Time Offer

25%

Off

Get Premium NSE7_SDW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tyra

19 days ago

Haha, you know what they say - when in doubt, enable all the things! But seriously, I think B is the way to go. Gotta love those application-level controls.

upvoted 0 times

...

Fletcher

21 days ago

I don't know, you guys. I was thinking D - selecting the individual SD-WAN members as the outgoing interface. Wouldn't that give FortiGate more granular control over the traffic shaping?

upvoted 0 times

...

Tamra

1 months ago

Dang, I was leaning towards C - enabling web filtering. But you make a good point, Trinidad. Application control seems like the more direct way to target the YouTube traffic specifically.

upvoted 0 times

Karan

13 days ago

Yeah, I also think B is the way to go. It directly targets the specific traffic we want to shape.

upvoted 0 times

...

Jess

15 days ago

I agree with you, B seems like the right choice to make FortiGate perform traffic shaping on YouTube traffic.

upvoted 0 times

...

Carmen

20 days ago

I think B is the correct answer. Application control should be enabled on the firewall policy to target YouTube traffic.

upvoted 0 times

...

Trinidad

1 months ago

Hmm, this one's tricky. I think the answer is B - enabling application control on the firewall policy. That should give FortiGate the ability to identify and shape the YouTube traffic.

upvoted 0 times