Implement a Basic SD-WAN Setup NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator is configuring DIA for a branch. The branch has a local internet link and a VPN tunnel to the headquarters. The requirement is that all internet-bound traffic should use the local link, but if the local link fails, traffic should fail over to the VPN tunnel. What is the best practice for this setup?

   • ACreate an SD-WAN rule for internet traffic with the local link as the preferred member and the VPN tunnel as the backup member
   • BConfigure the VPN tunnel as the preferred member and the local link as the backup member
   • CUse policy-based routing to send internet traffic via the local link, but do not configure any failover
   • DCreate a static route for internet traffic via the VPN tunnel and rely on the local link for other traffic
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A user reports that a specific application is experiencing intermittent connectivity. The SD-WAN health checks show both links are up and healthy. Which tool should the administrator use to investigate the issue?

   • AThe event log to check for SD-WAN rule changes
   • BThe SD-WAN widget to check overall link utilization
   • CThe CLI command 'diagnose sys sdwan health-check'
   • DThe traffic log filtered by the application and source/destination IP
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company with multiple branch offices wants to provide direct internet access for Office 365 traffic to reduce latency, while keeping all other internet traffic centralized through the headquarters for security inspection. Which DIA topology should the administrator implement?

   • ALocal breakout for all internet traffic at each branch
   • BUse a single SD-WAN zone with both local and central internet paths, but rely on the default routing table
   • CHybrid DIA with SD-WAN rules that send Office 365 traffic via local breakout and all other internet traffic via the headquarters
   • DCentralized internet access for all traffic at the headquarters
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which Fortinet tool provides a graphical dashboard for monitoring SD-WAN performance and traffic distribution?

   • AFortiAnalyzer
   • BFortiManager
   • CFortiGate CLI
   • DFortiGate GUI
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying SD-WAN with a hub-and-spoke topology. The hub is at the headquarters, and spokes are at branch offices. The branches have local internet access for DIA. What is the role of the hub in this topology?

   • ATo route all internet traffic from the branches to the internet
   • BTo terminate overlay tunnels from all spokes and provide centralized services such as security inspection for traffic that is not locally broken out
   • CTo act as a DHCP server for all branch devices
   • DTo provide a backup internet connection for all spokes
   Reveal Solution Discussion Select an answer first