Fortinet NSE7_SDW-6.4 Value Pack (Frequently Bought Together)

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

• A. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.
• B. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
• C. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
• D. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

Refer to the exhibit.

Which two statements about the debug output are correct? (Choose two )

• A. Traffic being controlled by the traffic shaper is under 1 Kbps.
• B. This traffic shaper drops traffic that exceeds the set limits.
• C. FortiGate provides statistics and reading based on historical traffic logs.
• D. The debug output shows per-IP shaper values and real-time readings.

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

• A. Use different proposals are used between the interfaces.
• B. Specify a unique peer ID for each dial-up VPN interface.
• C. Configure the IKE mode to be aggressive mode.
• D. Use unique Diffie Hellman groups on each VPN interface.

Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

• A. All the existing sessions will be blocked from using port1 and port2.
• B. All the existing sessions will continue to use port2, and new sessions will use port1.
• C. All the existing sessions using SNAT will be flushed and routed through port1.
• D. All the existing sessions that do not use SNAT will be flushed and routed through port1.

Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

• A. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
• B. Check interval is the time to wait before a packet sent by a member interface considered as lost.
• C. The dead member interface stays unavailable until an administrator manually brings the interface back.
• D. Port2 needs to wait 500 milliseconds to change the status from alive to dead.