Configure SD-WAN Rules NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In the 'lowest cost (SLA)' strategy, how does the FortiGate select a link for traffic?

   • AIt always selects the link with the lowest cost, regardless of performance.
   • BIt selects the link with the best performance, regardless of cost.
   • CIt selects the lowest-cost link that also meets the performance thresholds defined in the SLA target map.
   • DIt load-balances traffic across all links that meet the SLA.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company uses FortiGate SD-WAN and wants to steer traffic to a specific third-party application that is not in the predefined internet service database. The application uses a set of IP addresses and ports that are not contiguous. The administrator needs to create a custom internet service definition. What is the most efficient way to define this custom internet service?

   • AUse a wildcard FQDN address object that matches the application's domain, and use it in the SD-WAN rule.
   • BCreate a single address object with all the IP addresses and ports, then use it in the SD-WAN rule's destination.
   • CCreate a custom internet service and add multiple IP address and port entries to it, then use this custom service in the SD-WAN rule's destination.
   • DConfigure a policy route for each IP address and port combination, and then use the SD-WAN rule for the rest of the traffic.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has configured several user-defined SD-WAN rules to steer specific application traffic. They notice that traffic from a legacy application, which is not matched by any user-defined rule, is still being sent out through the SD-WAN interface. The administrator wants to understand why this traffic is not dropped. What is the most accurate explanation for this behavior?

   • AThe traffic is being forwarded by the kernel's default route because no SD-WAN rule was matched, bypassing the SD-WAN interface selection logic.
   • BThe legacy application's traffic is matched by a policy route that takes precedence over SD-WAN rules, so it is sent out the SD-WAN interface without rule evaluation.
   • CThe firewall policy is configured to allow the traffic, and the SD-WAN rule lookup is skipped for traffic that matches a firewall policy with NAT enabled.
   • DThe implicit SD-WAN rule matches all remaining traffic and uses the configured strategy (e.g., load balancing or best quality) to select a link, so the traffic is forwarded normally.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of an SLA target map in the 'lowest cost (SLA)' SD-WAN strategy?

   • ATo define the cost of each WAN link.
   • BTo define which applications are allowed to use the link.
   • CTo define the routing protocol used on the link.
   • DTo define acceptable performance thresholds (e.g., latency, jitter, loss) that a link must meet to be considered for selection.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does the health and performance of a WAN link influence the selection of a steering strategy in an SD-WAN rule?

   • AStrategies like 'Best Quality' use link health metrics to select the link that best meets the performance criteria.
   • BLink health is only used for reporting and does not affect steering decisions.
   • CIf a link is unhealthy, the rule is automatically disabled.
   • DThe steering strategy determines which links are monitored, but health does not change the strategy's behavior.
   Reveal Solution Discussion Select an answer first