Free Fortinet NSE7_SDW-7.2 Exam Dumps Questions & Answers

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

• A.  It enables spokes to establish shortcuts to third-party gateways.
• B.  It provides direct connectivity between spokes by creating shortcuts.
• C.  It enables spokes to bypass the hub during shortcut negotiation.
• D.  It provides the benefits of a full-mesh topology in a hub-and-spoke network.

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

• A.  link-down-failover
• B.  hold-down-time
• C.  auto-discovery-shortcuts
• D.  idle-timeout

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

• A.  Specify a unique peer ID for each dial-up VPN interface.
• B.  Use unique Diffie Hellman groups on each VPN interface.
• C.  Use different proposals are used between the interfaces.
• D.  Configure the IKE mode to be aggressive mode.

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

• A.  You can configure interfaces as SD-WAN members without having to remove references first.
• B.  You can reference meta fields.
• C.  You can configure advanced CLI settings.
• D.  You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

Refer to the exhibit.

Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

• A.  add-route must be disabled.
• B.  type must be set to static.
• C.  exchange-interface-ip must be enabled.
• D.  mode-cfg must be enabled.