NSE6_SDW_AD-7.6 Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator Practice Questions
Prepare for NSE6_SDW_AD-7.6 with more than an answer.
- Exam fee
- $200 USD
- Time limit
- 75 minutes
- Questions on the exam
- 35-40
- Passing score
- Pass/Fail
- Level
- NSE 6 - Specialist
- Valid for
- 2 years (as part of FCSS certification)
Domains covered on the exam 5
- SD-WAN Setup20%
- Rules and Routing20%
- Centralized Management20%
- Advanced IPsec25%
- SD-WAN Troubleshooting15%
- 1
In an ADVPN deployment, what is the purpose of the 'add-route' setting (enabled by default) on the Phase 1 interface of the Spokes?
Show answer details
Correct answer: D
On Spoke devices (dial-up clients), enabling 'add-route' allows IKE to automatically add a route to the remote subnet (Phase 2 selectors) or the peer's IP once the tunnel is established. For ADVPN, this often assists in initial connectivity before dynamic routing takes over or handles the tunnel interface route.
- 2
You are troubleshooting a scenario where an SD-WAN member is consistently flapping between 'alive' and 'dead' states, causing traffic instability.
Which SD-WAN configuration parameter should be adjusted to stabilize the member status?
Show answer details
Correct answer: D
If a link is on the borderline of quality, increasing the thresholds (e.g., requiring 5 failures before marking down, or 5 successes before marking up) prevents rapid state changes (flapping).
- 3
Case Study: GlobalCorp has a main office and 20 branches. They use FortiGate devices at all locations managed by FortiManager. They want to implement an SD-WAN rule that sends all 'Business Critical' traffic (defined in a custom application group) over the MPLS link, unless the MPLS link has packet loss greater than 1%. If the MPLS link degrades, traffic should switch to the IPsec VPN over Internet.
How should the administrator configure the SD-WAN rule?
Show answer details
Correct answer: B
Lowest Cost (SLA) strategy prefers the interface with the lowest cost that meets the SLA. If MPLS has lower cost (e.g., 0) and VPN has higher (e.g., 10), MPLS is used as long as it meets the 1% packet loss SLA. If it fails, traffic switches to VPN (assuming VPN meets the SLA or is the only remaining option).
- 4
An administrator is configuring an SD-WAN zone on a FortiGate device running FortiOS 7.6. The goal is to group two physical WAN interfaces and one IPsec VPN tunnel interface into a single zone for simplified policy management.
Which statement correctly describes the restriction or behavior when adding these interfaces to an SD-WAN zone?
Show answer details
Correct answer: C
Before an interface can be added to an SD-WAN zone (or used as an SD-WAN member), it must not be referenced in any existing firewall policies, routes, or other configurations. You must remove all references first.
- 5
A network architect is designing an SD-WAN deployment using FortiManager 7.6 to manage 500 branch locations. The branches use a standardized hardware model but have unique WAN IP addresses and gateway configurations.
Which FortiManager feature should be used to apply a single SD-WAN template to all devices while handling the unique addressing requirements?
Show answer details
Correct answer: A
Meta fields (variables) allow you to define per-device values (like WAN IPs and gateways) that are referenced in a shared template. When the template is installed, FortiManager substitutes the variable with the specific device's value.
- 6
An organization requires an SD-WAN rule for VoIP traffic. The requirement is to always use the link with the lowest latency, but if the latency difference between the best and second-best link is less than 5ms, the traffic should not switch to prevent instability.
Which configuration setting in the SD-WAN rule handles this requirement?
Show answer details
Correct answer: D
The 'link-cost-threshold' (or sometimes referred to as quality comparison threshold depending on context, though often configured as part of the SLA or rule logic) defines the minimum difference required to switch links in a Lowest Cost or Best Quality strategy to prevent flapping.
