A network engineer is explaining SD-WAN to a new team member. They say: 'The underlay is the physical network, and the overlay is the logical network built on top.' Which of the following is an example of an overlay link that can be an SD-WAN member?

A physical Ethernet cable connecting a FortiGate to a modem.

A VLAN interface on a physical port.

A static route to a remote network.

An IPsec VPN tunnel between two FortiGates.

A branch office has a single WAN link today, but the company plans to add a second link next quarter. The administrator wants to configure SD-WAN now so that adding the second link later is easy. What is the recommended approach?

Wait until the second link is available before configuring any SD-WAN.

Create an SD-WAN zone now and add the current WAN link as a member. When the second link is added, add it to the same zone.

Create two zones now, one for each future link, even though only one link exists.

Configure the current link as a static route and convert to SD-WAN later.

A network engineer is explaining SD-WAN to a colleague. They say: 'The physical internet circuit is the underlay, and the IPsec VPN tunnel over it is the overlay.' Which statement best describes why this distinction matters for SD-WAN member configuration?

Only underlay interfaces can be SD-WAN members; overlay tunnels are managed separately.

Underlay links are for LAN traffic, and overlay links are for WAN traffic.

Overlay links are always preferred over underlay links in SD-WAN rules.

Underlay links are used for transport, while overlay links provide the logical path; both can be members in SD-WAN.

Which of the following is a valid configuration step when creating an SD-WAN zone on a FortiGate?

Specify the encryption algorithm for the zone

Define the zone's IP subnet and gateway

Assign a name and select the SD-WAN members to include in the zone

A company has two sites, each with two WAN links. They want to apply a consistent SD-WAN policy across both sites, but they also need to be able to adjust the preferred link at one site without affecting the other. What is the best way to structure the SD-WAN zones?

Create a separate SD-WAN instance for each site and assign the links accordingly.

Create one zone on the hub and add both sites' links to it.

Create a zone on each FortiGate with that site's two links. Apply similar SD-WAN rules on both, but adjust the member preference at each site as needed.

Use the same zone name on both FortiGates and rely on the SD-WAN central management to sync the configuration.

FortinetNSE 5 - SD-WAN Core Administrator

Domain 1Objective 2

Configure SD-WAN Members and Zones NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 2)

Part of the Decentralized SD-WAN domain, which accounts for 20-30% of the NSE5-SD-WAN-CORE-ADMINISTRATOR exam.

22questions here

5free pages

4concepts

20-30%of the exam

Questions 6–10

6application · medium
A network engineer is explaining SD-WAN to a new team member. They say: 'The underlay is the physical network, and the overlay is the logical network built on top.' Which of the following is an example of an overlay link that can be an SD-WAN member?
Select an answer first
7application · easy
A branch office has a single WAN link today, but the company plans to add a second link next quarter. The administrator wants to configure SD-WAN now so that adding the second link later is easy. What is the recommended approach?
Select an answer first
8application · medium
A network engineer is explaining SD-WAN to a colleague. They say: 'The physical internet circuit is the underlay, and the IPsec VPN tunnel over it is the overlay.' Which statement best describes why this distinction matters for SD-WAN member configuration?
Select an answer first
9foundation · easy
Which of the following is a valid configuration step when creating an SD-WAN zone on a FortiGate?
Select an answer first
10expert · hard
A company has two sites, each with two WAN links. They want to apply a consistent SD-WAN policy across both sites, but they also need to be able to adjust the preferred link at one site without affecting the other. What is the best way to structure the SD-WAN zones?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-SD-WAN-CORE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-SD-WAN-CORE-ADMINISTRATOR” is a trademark of its owner, used for identification only.