Free Fortinet NSE7_SDW-7.2 Exam Dumps and NSE7

Question No: 1

MultipleChoice

Refer to the exhibit.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.

Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Options

ACreate a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

BIn the traffic shaping policy, select Assign Shaping Class ID as Action.

CIn the firewall policy, select Proxy-based as Inspection Mode.

DIn the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

Question No: 2

MultipleChoice

Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.

Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

Options

ALondon generates an IKE information message that contains the Toronto public IP address.

BTraffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

CToronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

DThe first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Question No: 3

MultipleChoice

Refer to the exhibit.

Exhibit B --

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

Options

Aport1 is assigned a manual IP address.

Bport1 is referenced in a firewall policy.

Cport2 is referenced in a static route.

Dport1 and port2 are not administratively down.