Pre-Summer Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

NSE6_SDW_AD-7.6 Exam Dumps - Fortinet Network Security Expert Questions and Answers

Question # 4

Refer to the exhibits.

The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configuration and the underlay zone status.

Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choose two.)

Options:

A.

Only related TCP traffic is used for performance measurement.

B.

The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.

C.

Encrypted traffic is not used for the performance measurement.

D.

FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.

Buy Now
Question # 5

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.

The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.

Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

Options:

A.

Full SSL inspection is not enabled on the matching firewall policy.

B.

The session 3-tuple did not match any of the existing entries in the ISDB application cache.

C.

FortiGate could not refresh the routing information on the session after the application was detected.

D.

No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting

Buy Now
Question # 6

Refer to the exhibit.

The administrator configured the SD-WAN rule ID 4 with two members (port1 and port2) and strategy lowest cost (SLA).

What are the two characteristics of the session shown in the exhibit? (Choose two.)

Options:

A.

FortiGate steered this flow according to an SD-WAN rule 4.

B.

FortiGate will never re-evaluate this session.

C.

FortiGate steered this flow according to the application detected and the outgoing interface is port3.

D.

FortiGate will re-evaluate this session if the outgoing interface goes down.

Buy Now
Question # 7

You want FortiGate to use SD-WAN rules to steer local-out traffic.

Which two constraints should you consider? (Choose two.)

Options:

A.

By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.

B.

By default, local-out traffic does not use SD-WAN.

C.

You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

D.

You must configure each local-out feature individually to use SD-WAN.

Buy Now
Question # 8

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are two mandatory post-run tasks that must be performed? (Choose two.)

Options:

A.

Configure routing through the overlay tunnels created by the SD-WAN overlay template.

B.

Create policy packages and assign them to the branch devices.

C.

Assign a hub id metadata variable to each hub device.

D.

Configure SD-WAN rules

E.

Assign an sdwan_id metadata variable to each device (branch and hub)

Buy Now
Question # 9

Refer to the exhibit.

What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company’s SMTP mail server at 10.66.0.125?

Options:

A.

FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server 10.66 0.125 through port3.

B.

ForliGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server 10.66.0.125 through port2.

C.

FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server 10.66.0.125 through the SD-WAN member ID 4.

D.

FortiGate steers the traffic from the LAN device 10.0.1.133 to the SMTP mail server 10.66.0.125 through the SD-WAN member ID 1 or 2.

Buy Now
Question # 10

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Options:

A.

Update the IPsec tunnel configurations on the hub.

B.

Update the SD-WAN configuration on the branches.

C.

Update the IPsec tunnel configuration on the branches.

D.

Delete the existing ADVPN configuration and configure ADVPN 2.0.

Buy Now
Question # 11

Refer to the exhibits.

The interface details, static route configuration, and firewall policies on the managed FortiGate device are shown.

You want to configure a new SD-WAN zone, named Underlay, that contains the interfaces port1 and port2.

What must be your first action?

Options:

A.

Define port1 as an SD-WAN member.

B.

Delete the static routes.

C.

Delete the SD-WAN Zone Test.

D.

Delete the firewall policies.

Buy Now
Question # 12

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

Options:

A.

A template group can include a system template and an SD-WAN template.

B.

Each template group can contain up to three IPsec tunnel templates.

C.

CLI templates are applied in order, from top to bottom

D.

A CLI template group can contain CLI templates of both types.

E.

A CLI template can be of type CLI script or Perl script.

Buy Now
Question # 13

Exhibit.

The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit.

Based on the configuration, which three conclusions can you draw about the characteristics and requirements of the VPN tunnel? (Choose three.)

Options:

A.

The tunnel interface IP address on the spoke side is provided by the hub.

B.

The remote end can be a third-party IPsec device.

C.

The administrator must manually assign the tunnel interface IP address on the hub side

D.

The remote end must support IKEv2.

E.

This configuration allows user-defined overlay IP addresses.

Buy Now
Exam Code: NSE6_SDW_AD-7.6
Exam Name: Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator
Last Update: Apr 17, 2026
Questions: 96
NSE6_SDW_AD-7.6 pdf

NSE6_SDW_AD-7.6 PDF

$25.5  $84.99
NSE6_SDW_AD-7.6 Engine

NSE6_SDW_AD-7.6 Testing Engine

$28.5  $94.99
NSE6_SDW_AD-7.6 PDF + Engine

NSE6_SDW_AD-7.6 PDF + Testing Engine

$40.5  $134.99