Free NSE6-SDW-AD-7-6 Fortinet NSE6-SDW-AD-7-6 Practice Test Question

Question 1 (Topic 1)

Refer to the exhibits. The administrator increases the member priority on port2 to 20. Assuming the route egressing port2 is still valid, upon configuration changes and the receipt of new packets. Which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

Select an option, then click Submit answer.

○ FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.
○ FortiGate continues routing all existing sessions over port2.
○ FortiGate flags all source network address translation (SNAT) sessions as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.
○ FortiGate routes new sessions over port1.
○ FortiGate flags all sessions as dirty.

Reference / correct answer:

FortiGate flags all sessions as dirty.

Most accepted answer: E. FortiGate flags all sessions as dirty.

Community votes: A=1, B=1, D=1, E=3

Selected Answer: AE Por qué Con snat-route-change enable, FortiGate reevalúa las sesiones con SNAT cuando cambia la ruta; eso hace que los campos de gateway puedan actualizarse y que la sesión quede marcada como dirty para volver a resolver la ruta. En el caso mostrado, al subir la prioridad de port2 a 20, el tráfico nuevo puede preferir port1, y las sesiones existentes con SNAT pueden ver actualizado su gateway hacia la nueva salida si la ruta cambia. Por eso, las dos acciones que mejor describen el comportamiento son que FortiGate actualiza la gateway info de las sesiones con SNAT y que marca las sesiones como dirty para reevaluación. upvoted 1 times

Selected Answer: BE preserve-session-route enable is the key setting in this scenario. Even if the route priority changes and port1 becomes the preferred route, FortiGate keeps existing sessions on port2. Only new sessions are routed through port1 upvoted 1 times

Selected Answer: DE FortiGate flags all sessions as dirty - The Global system configuration shows set snat-route-change enable. When this is enabled, any routing change—such as increasing the priority of an SD-WAN member—causes FortiGate to flag existing sessions as "dirty" so they can be re-evaluated against the new routing table. FortiGate routes new sessions over port1 - The Routing Table on FortiGate show two default routes via port2 and port1. Originally, port2 is preferred (listed first with a priority of 1). By increasing the priority of port2 to 20, it becomes less preferred than port1 (which presumably retains its original priority). Consequently, FortiGate will select the now better-prioritized port1 for all new sessions. upvoted 1 times

Question 2 (Topic 1)

Refer to the exhibit. Which action will FortiGate take if it detects SD-WAN members as dead?

Select an option, then click Submit answer.

○ FortiGate bounces port5 after it detects all SD-WAN members as dead.
○ FortiGate brings down port5 after it detects all SD-WAN members as dead.
○ FortiGate sends alert messages through port5 when it detects all SD-WAN members as dead.
○ FortiGate fails over to the secondary device after it detects port5 as dead.

Question 3 (Topic 1)

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error “Copy Failed” for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit. Based on the exhibits, which statement best describes the issue and how you can resolve it?

Select an option, then click Submit answer.

○ Check the metadata variable definitions, and review the per-device mapping configuration.
○ Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.
○ Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port1 without metadata variables.
○ Check the connection between branch1_fgt and FortiManager.

Free NSE6-SDW-AD-7-6 – Fortinet NSE6-SDW-AD-7-6 Practice Test Question