NSE6_SDW_AD-7.6

Review 61 NSE6-SDW-AD-7-6 practice questions with answer explanations and community insights.

Question 1

Refer to the exhibit.Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

  1. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
  2. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.
  3. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
  4. On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

Question 2

Which three factors about service-level agreement (SLA) targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

  1. When configuring an SD-WAN rule, you can select multiple SLA targets from the same performance SLA.
  2. Member metrics are measured when an SLA target references them.
  3. When configuring an SD-WAN rule, you can select only one SLA target.
  4. Best performance SD-WAN rules cannot use SLA targets.
  5. SLA targets are used by only SD-WAN rules that are configured with a lowest cost (SLA) strategy.

Question 3

Refer to the exhibit.An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 networkThe administrator expects the traffic to match SD-WAN rule ID 1 and be routed over HUB1-VPN1. However, the traffic is routed over HUB1-VPN3.Based on the output shown in the exhibit, which two reasons, individually or together, could explain the observed behavior? (Choose two.)

  1. HUB1-VPN3 has a lower route priority value (higher priority) than HUB1-VPN1.
  2. HUB1-VPN3 has a higher member configuration priority than HUB1-VPN1.
  3. The traffic matches a regular policy route configured with HUB1-VPN3 as the outgoing device.
  4. HUB1-VPN1 does not have a valid route to the destination.

Question 4

Refer to the exhibits.You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?

  1. HUB1-VPN1
  2. port1
  3. port4
  4. port2

Question 5

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.What happens if you delete the SD-WAN member from the FortiGate GUI?

  1. FortiGate accepts the deletion and places the member in the default SD-WAN zone.
  2. FortiGate accepts the SD-WAN member deletion with no further action.
  3. FortiGate accepts the deletion and removes static routes as required.
  4. FortiGate displays an error message. SD-WAN zones must contain at least two members.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.