Free NSE7_SDW-6.4: Fortinet NSE 7 - SD-WAN 6.4 Exam Questions and Answers

Last updated: September 19, 2026

Provider

Fortinet

Questions in our bank

1000+

Free to read

First 10, with answers

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Practice format

Multiple choice

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   What is the lnkmtd process responsible for?

   • A. Monitoring links for any bandwidth saturation
   • B. Processing performance SLA probes
   • C. Flushing route tags addresses
   • D. Logging interface quality information
   Reveal Answer

2. Question #2

   Which components make up the secure SD-WAN solution?

   • A. Application, antivirus, and URL, and SSL inspection
   • B. Datacenter, branch offices, and public cloud
   • C. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
   • D. Telephone, ISDN, and telecom network.
   Reveal Answer

3. Question #3

   Refer to exhibits. Exhibit B. Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits. To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

   
   • A. The shaper mode must be applied per-IP shaper on the traffic shaping policy
   • B. The application control profile must be enabled on the firewall policy.
   • C. The web filter profile must be enabled on the firewall policy
   • D. The URL category must be specified on the traffic shaping policy
   Reveal Answer

4. Question #4

   What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

   Select 2 answers.

   • A. The FortiGate cloud key has not been added to the FortiGate cloud portal.
   • B. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
   • C. The zero-touch provisioning process has completed internally, behind FortiGate.
   • D. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
   • E. A factory reset performed on FortiGate.
   Reveal Answer

5. Question #5

   Refer to the exhibit. Which two statements about the debug output are correct? (Choose two )

   

   Select 2 answers.

   • A. The debug output shows per-IP shaper values and real-time readings.
   • B. This traffic shaper drops traffic that exceeds the set limits.
   • C. Traffic being controlled by the traffic shaper is under 1 Kbps.
   • D. FortiGate provides statistics and reading based on historical traffic logs.
   Reveal Answer

6. Question #6

   In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

   Select 2 answers.

   • A. Traffic has matched none of the FortiGate policy routes.
   • B. Matched traffic failed RPF and was caught by the rule.
   • C. The FIB lookup resolved interface was the SD-WAN interface.
   • D. An absolute SD-WAN rule was defined and matched traffic.
   Reveal Answer

7. Question #7

   Refer to the exhibit. Which statement about the trace evaluation by FomGate is true?

   
   • A. Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.
   • B. The packet exceeded the configured bandwidth and was dropped based on the priority configuration.
   • C. The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.
   • D. Packets exceeding the configured concurrent connection limit are dropped based on the priority configuration.
   Reveal Answer

8. Question #8

   Refer to the exhibit. Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

   
   • A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
   • B. FortiGate has terminated the session after a change on policy ID 1.
   • C. Changes have been made on firewall policy ID 1 on FortiGate.
   • D. Firewall policy ID 1 has source NAT disabled.
   Reveal Answer

9. Question #9

   Refer to the exhibit. Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

   

   Select 2 answers.

   • A. set cost 15.
   • B. set source 100.64.1.1.
   • C. set priority 10.
   • D. set load-balance-mode source-ip-based.
   Reveal Answer

10. Question #10

    Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?

    
    • A. It enables the SD-WAN rule to load balance and assign traffic with a route tag
    • B. It tags each route and references the tag in the routing table.
    • C. It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.
    • D. It ensures route tags match the SD-WAN rule based on the rule order
    Reveal Answer