[UPDATED Feb-2024] Best Value Available Preparation Guide for NSE7_SDW-7.0 Exam [Q42-Q57]

QUESTION 42
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

QUESTION 43
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?

QUESTION 44
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

QUESTION 45
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.
The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.
Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

QUESTION 46
Refer to the exhibits.
Exhibit A –

Exhibit B –

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferredmember in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

QUESTION 47
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

QUESTION 48
Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths. However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

QUESTION 49
Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

QUESTION 50
Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?

QUESTION 51
Which components make up the secure SD-WAN solution?

QUESTION 52
Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

QUESTION 53
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

QUESTION 54
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

QUESTION 55
Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

QUESTION 56
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

QUESTION 57
What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )