Fortinet NSE 6 SD-WAN 7.6 Enterprise Administrator - NSE6_SDW_AD-7.6 Practice Questions

Refer to the exhibit.

Which two conclusions can you draw from the output shown? (Choose two.)

A. One SD-WAN rule is defined with application categories as the destination.

B. UDP traffic destined to the subnet 10.22.0.0/24 matches a manual SD-WAN rule.

C. One SD-WAN rule allows traffic load balancing.

D. UDP traffic destined to the subnet 10.22.0.0/24 matches a policy route.

Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?

A. The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.

B. The device steers voice traffic through the VPN tunnel HUB1-VPN3.

C. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

D. There is one shortcut tunnel built from master tunnel VPN4.

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it. What happens if you delete the SD-WAN member from the FortiGate GUI?

A. FodiGate accepts the deletion and removes routes as required.

B. FortiGate displays an error message. You must use the CLI to delete an SD-WAN member.

C. FortiGate displays an error message. SD-WAN zones must contain at least two members

D. FortiGate accepts the deletion and places the member in the default SD-WAN zone.

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading. Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

A. By default, FortiGate offloads symmetric and asymmetric flows.

B. The original direction of the symmetric traffic flows from port3 to port2.

C. The reply direction of the asymmetric traffic flows from port2 to port3.

D. The auxiliary session can be offloaded to hardware.

Your FortiGate is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process?

A. Replace references to interfaces used as SD-WAN members in the routing configuration.

B. Purchase and install the SD-WAN license, and reboot the FortiGate device.

C. Replace references to interfaces used as SD-WAN members in the firewall policies.

D. Disable the interface that you want to use as an SD-WAN member.

You are planning a new SD-WAN deployment with the following criteria:
- Two regions
- Most of the traffic is expected to remain within its region
- No requirement for inter-region ADVPN
To remain within the recommended best practices, which routing protocol should you select for the overlays?

A. OSPF for the routing within each region and EBGP between the regions.

B. IBGP with BGP on loopback within each region and EBGP between the regions.

C. IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.

D. IBGP within each region and between the regions.

Refer to the exhibits.

You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

A. port4

B. HUB1-VPN1

C. port1

D. port2