NSE5_SSE_AD-7.6: Fortinet NSE 5 - FortiSASE and SD-WAN 7.6 Core Administrator Fortigate Practice Questions

A FortiGate device is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process? (Choose one answer)

• AA. Replace references to interfaces used as SD-WAN members in the firewall policies.
• BB. Replace references to interfaces used as SD-WAN members in the routing configuration.
• CC. Disable the interface that you want to use as an SD-WAN member.
• DD. Purchase and install the SD-WAN license, and reboot the FortiGate device.

Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service collected on a FortiGate device. The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook. Based on the exhibits, which two statements are correct? (Choose two.)

Select 2 answers.

• AA. FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.
• BB. There is no service defined for the Facebook application, so FortiGate applies servicerule 3 and directs the traffic to headquarters.
• CC. When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1, HQ_T2, HQ_T3.
• DD. When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.

You want FortiGate to use SD-WAN rules to steer ping local-out traffic. Which two constraints should you consider? (Choose two.)

Select 2 answers.

• AA. You must configure each local-out feature individually to use SD-WAN.
• BB. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.
• CC. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.
• DD. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.