Fortinet Fortinet Certification NSE7_SDW-7.2 New Questions

Fortinet NSE 7 - SD-WAN 7.2 Questions and Answers

Question 21

Refer to the exhibit.

Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)

After FortiGate switches to active mode, FortiGate never fails back to passive monitoring.

During passive monitoring, FortiGate can’t detect dead members.

FortiGate can offload the traffic that is subject to passive monitoring to hardware.

FortiGate passively monitors the member if TCP traffic is passing through the member.

Question 22

What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

The ISDB is dynamically updated and reduces administrative overhead.

The ISDB requires application control to maintain signatures and perform load balancing.

The ISDB applies rules to traffic from specific sources, based on application type.

The ISDB contains the IP addresses and port ranges of well-known internet services.

Question 23

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in a hub-and-spoke topology? (Choose two.)

VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.

FortiManager automatically installs IPsec tunnels to every spoke when they are added to the FortiManager ADOM.

IPsec recommended template guides the administrator to use Fortinet recommended settings.

IPsec recommended template ensures consistent settings between phase1 and phase2

Question 24

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

hold-down-time

link-down-failover

auto-discovery-shortcuts

idle-timeout