NSE7_SDW-7.2: Fortinet NSE 7 - SD-WAN 7.2 Fortigate Practice Questions

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate. Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

Select 2 answers.

• AA. FortiGate flags the sessions as dirty.
• BB. FortiGate continues routing the sessions with no SNAT, over port2.
• CC. FortiGate performs a route lookup for the original traffic only.
• DD. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

Which action fortigate performs on the traffic that is subject to a per-IP traffic shaper of 10 Mbps?

• AA. FortiGate applies traffic shaping to the original traffic direction only.
• BB. FortiGate shares 10 Mbps of bandwidth equally among all source IP addresses. RIAS
• CC. Fortigate limits each source ip address to a maximum bandwidth of 10 Mbps.
• DD. FortiGate guarantees a minimum of 10 Mbps of bandwidth to each source IP address.

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

• AA. The gateway address of their IPsec interfaces
• BB. The tunnel ID of their IPsec interfaces
• CC. The IP address of their IPsec interfaces
• DD. The name of their IPsec interfaces