Fortinet NSE7_SDW-7.0 Exam

Certification Provider: Fortinet

Exam Name: Fortinet NSE 7 - SD-WAN 7.0

Number of questions in our database: 35

Exam Version: Sep. 15, 2023

NSE7_SDW-7.0 Exam Official Topics:

Topic 1: Configure SD-WAN Members and Performance SLAs/ SD-WAN troubleshooting Configure SD-WAN traffic shaping/ Configure SD-WAN rules
Topic 2: Deploy a hub-and-spoke IPsec topology for SD-WAN and ADVPN/ Configure a basic SD-WAN DIA setup
Topic 3: Configure and monitor an SD-WAN deployment from FortiManager/ Advanced IPsec VPN

Free Fortinet NSE7_SDW-7.0 Exam Actual Questions

The questions for NSE7_SDW-7.0 were last updated On Sep. 15, 2023

Question #1

Refer to the exhibit.

Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

Atype must be set to static.

Bmode-cfg must be enabled.

Cexchange-interface-ip must be enabled.

Dadd-route must be disabled.

Reveal Solution

Correct Answer: D

for using 'non ike' routes (for example BGP/static and so on) you must do disable the add-route that inject automatically kernel route based on p2 selectors from the remote site from the SD-WAN_7.2_Study_Guide page 236

Question #2

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

AThe FortiGate cloud key has not been added to the FortiGate cloud portal.

BFortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

CThe zero-touch provisioning process has completed internally, behind FortiGate.

DFortiGate has obtained a configuration from the platform template in FortiGate cloud.

EA factory reset performed on FortiGate.

Reveal Solution

Correct Answer: A, C

Question #3

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

ASet priority 10.

BSet cost 15.

CSet load-balance-mode source-ip-ip-based.

DSet source 100.64.1.1.

Reveal Solution

Correct Answer: A, B

Question #4

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

AThe FortiGate cloud key has not been added to the FortiGate cloud portal.

BFortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

CThe zero-touch provisioning process has completed internally, behind FortiGate.

DFortiGate has obtained a configuration from the platform template in FortiGate cloud.

EA factory reset performed on FortiGate.

Reveal Solution

Correct Answer: A, C

Question #5

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

AA peer ID is included in the first packet from the initiator, along with suggested security policies.

BXAuth is enabled as an additional level of authentication, which requires a username and password.

CA total of six packets are exchanged between an initiator and a responder instead of three packets.

DThe use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Reveal Solution

Correct Answer: B, C

Unlock all NSE7_SDW-7.0 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Disscuss Fortinet NSE7_SDW-7.0 Topics, Questions or Ask Anything Related

Submit Cancel