Fortinet Exam NSE7_SDW-7.2 Topic 1 Question 7 Discussion

Actual exam question for Fortinet's NSE7_SDW-7.2 exam

Question #: 7
Topic #: 1

Refer to the exhibit.

The exhibit shows output of the command diagnose 3vg sdwan service collected on a FortiGate device.

The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HO servers 10.0.0.1.

Based on the exhibits, which two statements are correct? (Choose two.)

AWhen FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

BFortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

CThere is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.

DFortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Show Suggested Answer

Suggested Answer: A, B

The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. Reference: The benefits of using IPsec recommended templates are outlined in Fortinet's SD-WAN documentation, which emphasizes the importance of consistency and adherence to recommended configurations.

by Harrison at Apr 25, 2024, 03:43 PM

Limited Time Offer

25%

Off

Get Premium NSE7_SDW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leah

5 hours ago

But based on the exhibit, it clearly shows that FortiGate steers traffic to HO servers according to service rule 1 and uses port1 or port2, so B must be correct.

upvoted 0 times

...

Ernest

1 days ago

I disagree, I believe the correct answers are B and D.

upvoted 0 times

...

Leah

5 days ago

I think the correct answers are A and C.

upvoted 0 times

...