Configure SD-WAN Routing NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A FortiGate has a static route to 10.0.0.0/8 via the SD-WAN zone and a BGP-learned route to 10.0.0.0/8 via a direct connection with a lower administrative distance. Which route will be used for traffic to 10.1.1.1?

   • AThe static route, because SD-WAN zones are preferred over dynamic routes.
   • BBoth routes will be used for load balancing.
   • CThe FortiGate will drop the packet because of the routing conflict.
   • DThe BGP route, because it has a lower administrative distance.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A multinational company manages 50 FortiGate devices across different regions. They want to standardize SD-WAN routing policies, including policy routes and static routes, and push updates to all devices from a central location. What should they use?

   • AFortiManager to create and push SD-WAN templates and policies to all managed FortiGates.
   • BFortiAnalyzer to collect logs and generate reports on SD-WAN performance.
   • CSSH to each FortiGate and manually configure the SD-WAN settings.
   • DFortiGate's built-in SD-WAN orchestration feature to sync configurations automatically.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How does SD-WAN use health checks to influence dynamic path selection?

   • AHealth checks are performed only on the primary WAN link and ignore backup links
   • BHealth checks monitor link quality and update the SD-WAN rule's preferred path based on measured performance
   • CHealth checks replace the need for static routes in SD-WAN
   • DHealth checks are used only to generate logs and do not affect routing decisions
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following criteria can a policy route use to match traffic?

   • AOnly the source MAC address
   • BOnly the incoming interface
   • CSource IP address, destination IP address, and application
   • DOnly the destination IP address
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An SD-WAN deployment uses two links: a low-latency fiber link and a high-bandwidth cable link. The administrator wants real-time VoIP traffic to always use the fiber link when it is healthy, but failover to cable if fiber degrades. What is the best way to achieve this?

   • AConfigure an SD-WAN rule for VoIP that sets the fiber link as the preferred member and enables failover to cable.
   • BSet the fiber link as the primary in the SD-WAN zone and cable as secondary.
   • CUse a policy route to send VoIP to fiber and rely on the routing table for failover.
   • DCreate a static route for VoIP traffic via the fiber link and a backup route via cable.
   Reveal Solution Discussion Select an answer first