A company wants to provide redundancy by using two different ISPs for internet access. How can SD-WAN members and zones help achieve this?

By configuring the two links as underlay and overlay

By using only one SD-WAN member and relying on the ISP's redundancy

By assigning both ISP links as SD-WAN members and using SD-WAN rules to failover when one link goes down

By creating a zone for each ISP and manually switching between them

Which of the following is an example of an overlay link in a Fortinet SD-WAN deployment?

A direct fiber connection to an ISP

A VLAN interface on a FortiGate

An IPsec tunnel between two FortiGate devices

A company has two MPLS circuits and one internet circuit at headquarters. They want to ensure that traffic to a specific SaaS application always uses the internet circuit, while all other traffic uses the MPLS circuits. How should the SD-WAN zones be structured?

Assign the internet circuit to a different SD-WAN instance than the MPLS circuits.

Create a separate zone for the internet circuit and another for the MPLS circuits, then route SaaS traffic to the internet zone.

Use policy routing to send SaaS traffic directly out the internet interface, bypassing SD-WAN.

Place all three interfaces in one zone and create an SD-WAN rule for the SaaS traffic to prefer the internet member.

In a scenario where a branch has two WAN links (MPLS and broadband) and you want to steer real-time voice traffic to the MPLS link, which SD-WAN feature would you use?

SD-WAN rules (policy-based routing)

A financial services firm has two MPLS links and one internet link at its main office. They need to ensure that all traffic to a partner's API is sent over the internet link for cost reasons, but they also want to ensure that if the internet link fails, the API traffic can still go over MPLS. What is the best way to achieve this?

Use policy-based routing to send API traffic out the internet interface, bypassing SD-WAN.

Place all three links in one zone. Create an SD-WAN rule for the API traffic that prefers the internet member, with MPLS members as backup.

Create a separate zone for the internet link and route API traffic to that zone.

Add the internet link to the SD-WAN but keep MPLS links as regular static routes.

FortinetNSE 5 - SD-WAN Core Administrator

Domain 1Objective 2

Configure SD-WAN Members and Zones NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 4)

Part of the Decentralized SD-WAN domain, which accounts for 20-30% of the NSE5-SD-WAN-CORE-ADMINISTRATOR exam.

22questions here

5free pages

4concepts

20-30%of the exam

Questions 16–20

16foundation · easy
A company wants to provide redundancy by using two different ISPs for internet access. How can SD-WAN members and zones help achieve this?
Select an answer first
17foundation · easy
Which of the following is an example of an overlay link in a Fortinet SD-WAN deployment?
Select an answer first
18application · medium
A company has two MPLS circuits and one internet circuit at headquarters. They want to ensure that traffic to a specific SaaS application always uses the internet circuit, while all other traffic uses the MPLS circuits. How should the SD-WAN zones be structured?
Select an answer first
19foundation · easy
In a scenario where a branch has two WAN links (MPLS and broadband) and you want to steer real-time voice traffic to the MPLS link, which SD-WAN feature would you use?
Select an answer first
20application · medium
A financial services firm has two MPLS links and one internet link at its main office. They need to ensure that all traffic to a partner's API is sent over the internet link for cost reasons, but they also want to ensure that if the internet link fails, the API traffic can still go over MPLS. What is the best way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-SD-WAN-CORE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-SD-WAN-CORE-ADMINISTRATOR” is a trademark of its owner, used for identification only.