Legit NSE7_SDW-7.2 Exam Download

Fortinet NSE 7 - SD-WAN 7.2 Questions and Answers

Question 13

Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)

Type of physical link connection

Internet service database (ISDB) address object

Source and destination IP address

URL categories

Application signatures

Question 14

Which two tasks are part of using central VPN management? (Choose two.)

You can configure full mesh, star, and dial-up VPN topologies.

You must enable VPN zones for SD-WAN deployments.

FortiManager installs VPN settings on both managed and external gateways.

You configure VPN communities to define common IPsec settings shared by all VPN gateways.

Question 15

Which statement is correct about SD-WAN and ADVPN?

Routes for ADVPN shortcuts must be manually configured.

SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

SD-WAN does not monitor the health and performance of ADVPN shortcuts.

You must use IKEv2 on IPsec tunnels.

Question 16

Which two statements describe how IPsec phase 1 main mode id different from aggressive mode when performing IKE negotiation? (Choose two.)

A peer ID is included in the first packet from the initiator, along with suggested security policies.

XAuth is enabled as an additional level of authentication, which requires a username and password.

Three packets are exchanged between an initiator and a responder instead of six packets.

The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.