Fortinet NSE5_SSE_AD-7.6 Practice Questions & Answers

Question 6 of 12

Refer to the exhibit.
Exam NSE5_SSE_AD-7.6: Image 1

You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers traffic related to Facebook and LinkedIn through the less costly internet link.
What must you do to set Facebook and LinkedIn applications as destinations from the GUI?

A.

Enable the visibility of the applications field as destinations of the SD-WAN rule.

B.

You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

C.

Install a license to allow applications as destinations of SD-WAN rules.

D.

In the Internet service field select Facebook and LinkedIn.

Question 7 of 12

A FortiGate device is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN.
What must you do as part of this configuration update process?

A.

Replace references to interfaces used as SD-WAN members in the firewall policies.

B.

Replace references to interfaces used as SD-WAN members in the routing configuration.

C.

Disable the interface that you want to use as an SD-WAN member.

D.

Purchase and install the SD-WAN license, and reboot the FortiGate device.

Question 8 of 12

You are configuring SD-WAN to load balance network traffic.

Which two facts should you consider when setting up SD-WAN? (Choose two.)

A.

When applicable, FortiGate load balances traffic through all members that meet the SLA target.

B.

SD-WAN load balancing is possible only when using the manual and the best quality strategies.

C.

Only the manual and lowest cost (SLA) strategies allow SD-WAN load balancing,

D.

You can select the outsessions hash mode with all strategies that allow load balancing.

Question 9 of 12

Which three authentication sources support secure identity verification and access control for FortiSASE remote users? (Choose three.)

A.

Security Assertion Markup Language (SAML)

B.

Open Connect (OIDC)

C.

Lightweight Directory Access Protocol (LDAP)

D.

Terminal Access Controller Access-Control System Plus (TACACS+)

E.

Remote Authentication Dial-in User Service (RADIUS)

Question 10 of 12

Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

A.

Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

B.

Traffic does not match any of the entries in the policy route table.

C.

FortiGate flags the session with may_dirty and vwl_default.

D.

The traffic is distributed, regardless of weight, through all available static routes.

E.

The session information output displays no SD-WAN service id.