NSE7_SSE_AR-26 by Fortinet Valid Free Exam Practice Test

Question 1

Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

Exhibit 1

A. When all three members have the same packet loss B. When HUB1-VPN3 has 4% packet loss C. When HUB1-VPN1 has 4% packet loss D. When HUB1-VPN1 has 12% packet loss

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

A customer wants to ensure secure access for private applications for their users by replacing their VPN.
Which two SASE technologies can you use to accomplish this task? (Choose two.)

A. zero trust network access (ZTNA) B. secure SD-WAN C. secure web gateway (SWG) and cloud access security broker (CASB) D. SD-WAN on-ramp

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.
Which action will FortiGate take if it detects SD-WAN members as dead?

Exhibit - SD-WAN failure detection and cascade interface

A. FortiGate brings up port5 when it detects all SD-WAN members as dead. B. FortiGate brings up port5 after it detects one SD-WAN member as alive. C. FortiGate sends alert messages through port5 when it detects all SD-WAN members as dead. D. FortiGate sends alert messages through port5 when it detects any SD-WAN member as dead.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

An administrator is enforcing endpoint network lockdown using FortiSASE to ensure that devices access the internet only under defined security conditions. The lockdown state must be released automatically when the endpoint meets specific trust or connectivity criteria.
Which two conditions can trigger the release of the network lockdown on an endpoint? (Choose two answers.)

A. The endpoint is detected as being on-net. B. The endpoint is rebooted. C. The endpoint establishes a connection to the FortiSASE tunnel. D. The endpoint is evaluated as compliant using security posture tags.

Correct Answer: A,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

A. SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy. B. Member metrics are measured only if a rule uses the SLA target. C. When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs. D. When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA. E. SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

Correct Answer: A,C,E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Which two features must you configure before FortiGate can steer traffic according to SD-WAN rules?
Choose two answers.

A. Underlay links B. Overlay links C. Security profiles D. Firewall policies E. Traffic shaping

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Fortinet NSE 7 - FortiSASE 26 Architect - NSE7_SSE_AR-26 Exam Practice Test