Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Fortinet NSE7_SDW-7.2 Practice Exam with Questions & Answers

Questions 1

Refer to the exhibit.

NSE7_SDW-7.2 Question 1

The device exchanges routes using IBGP.

Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)

Options:
A.

Each BGP route is three hops away from the destination.

B.

ibgp-multipath is disabled.

C.

additional-path is enabled.

D.

You can run the get router info routing-table database command to display the additional paths.

Fortinet NSE7_SDW-7.2 Premium Access
Questions 2

Refer to the exhibit.

NSE7_SDW-7.2 Question 2

An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?

Options:
A.

It is a hub device. It can send ADVPN shortcut offers.

B.

It is a spoke device that establishes dynamic IPsec tunnels to the hub. The subnet range is 10.10.128.0/23.

C.

It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send ADVPN shortcut requests.

D.

It is a hub device and will automatically discover the spoke devices that are in the SD-WAN topology.

Questions 3

Refer to the exhibit.

NSE7_SDW-7.2 Question 3

The exhibit shows the SD-WAN rule status and configuration.

Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?

Options:
A.

When all three members have the same packet loss.

B.

When T_INET_0_0 has 4% packet loss.

C.

When T_INET_0_0 has 12% packet loss.

D.

When T_INET_1_0 has 4% packet loss.

Questions 4

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

Options:
A.

diagnose sys sdwan zone

B.

diagnose sys sdwan service

C.

diagnose sys sdwan member

D.

diagnose sys sdwan interface

Questions 5

Refer to the Exhibits:

NSE7_SDW-7.2 Question 5

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.

Based on the exhibits, which statement is correct?

Options:
A.

The dead member interface stays unavailable until an administrator manually brings the interface back.

B.

Port2 needs to wait 500 milliseconds to change the status from alive to dead.

C.

Static routes using port2 are active in the routing table.

D.

FortiGate has not received three consecutive requests from the SLA server configured for port2.

Questions 6

Refer to the exhibit.

NSE7_SDW-7.2 Question 6

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

Options:
A.

The number of simultaneous connections among all source IP addresses cannot exceed five connections.

B.

The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

C.

The number of simultaneous connections allowed for each source IP address cannot exceed five connections.

D.

The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

Questions 7

Refer to the exhibit.

NSE7_SDW-7.2 Question 7

Based on the exhibit, which action does FortiGate take?

Options:
A.

FortiGate bounces port5 after it detects all SD-WAN members as dead.

B.

FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

C.

FortiGate brings up port5 after it detects all SD-WAN members as alive.

D.

FortiGate brings down port5 after it detects all SD-WAN members as dead.

Questions 8

Exhibit.

NSE7_SDW-7.2 Question 8

The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

Options:
A.

The health-check VPN_PING orders the members according to the lowest jitter.

B.

The interface T_INET_1 missed one SLA target.

C.

There is no SLA criteria configured for the health-check Level3_DNS.

D.

The interface T_INET_0 missed three SLA targets.

Questions 9

Which components make up the secure SD-WAN solution?

Options:
A.

Application, antivirus, and URL, and SSL inspection

B.

Datacenter, branch offices, and public cloud

C.

FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

D.

Telephone, ISDN, and telecom network.

Questions 10

NSE7_SDW-7.2 Question 10

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.

Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

Options:
A.

London generates an IKE information message that contains the Toronto public IP address.

B.

Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

C.

Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

D.

The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Exam Code: NSE7_SDW-7.2
Certification Provider: Fortinet
Exam Name: Fortinet NSE 7 - SD-WAN 7.2
Last Update: Jul 19, 2025
Questions: 99

Fortinet Related Exams

How to pass Fortinet NSE7_ADA-6.3 - Fortinet NSE 7 - Advanced Analytics 6.3 Exam
How to pass Fortinet NSE7_EFW-7.0 - Fortinet NSE 7 - Enterprise Firewall 7.0 Exam
How to pass Fortinet NSE7_LED-7.0 - Fortinet NSE 7 - LAN Edge 7.0 Exam
How to pass Fortinet NSE7_SDW-7.0 - Fortinet NSE 7 - SD-WAN 7.0 Exam
How to pass Fortinet NSE7_OTS-7.2 - Fortinet NSE 7 - OT Security 7.2 Exam
How to pass Fortinet NSE7_PBC-7.2 - Fortinet NSE 7 Public Cloud Security 7.2 (FCSS) Exam
How to pass Fortinet NSE7_EFW-7.2 - Fortinet NSE 7 - Enterprise Firewall 7.2 Exam
How to pass Fortinet NSE7_ZTA-7.2 - Fortinet NSE 7 - Zero Trust Access 7.2 Exam
FCSS_SASE_AD-25 - FCSS - FortiSASE 25 Administrator
NSE8_812 - Network Security Expert 8 Written Exam
FCSS_SOC_AN-7.4 - FCSS - Security Operations 7.4 Analyst
NSE5_FCT-7.0 - NSE5_FCT-7.0 NSE 5 - FortiClient EMS 7.0
NSE6_FAD-6.2 - Fortinet NSE 6 - FortiADC 6.2
NSE6_ZCS-7.0 - Fortinet NSE 6 - Cloud Security 7.0 for Azure
FCSS_LED_AR-7.6 - FCSS - LAN Edge 7.6 Architect
Fortinet Free Access
Get Fortinet Full Access

Fortinet Free Exams
Fortinet Free Exams
Access free Fortinet exam study guides and practice tests at Examstrack. Ensure your success with top-notch preparation resources at Examstrack.