View Full Fortinet NSE6_SDW_AD-7.6 Exam Dumps and Practice Test Dumps.

 

Question 201

Which SD-WAN component evaluates WAN path performance using configured health-check criteria?

1. FortiManager
2. Performance SLA
3. FortiAnalyzer
4. Application Control

Correct Answer: 2

Explanation

Performance SLA is responsible for monitoring the quality and availability of SD-WAN paths according to configured health-check criteria. FortiGate can measure parameters such as latency, jitter, packet loss, and reachability depending on the health-check configuration. These measurements help determine whether an SD-WAN member satisfies the requirements of a particular rule. When a path becomes degraded, another eligible member may be selected according to the configured SD-WAN strategy. This makes Performance SLA an important component of dynamic path selection and helps administrators align WAN forwarding decisions with actual network conditions.

Question 202

Which SD-WAN strategy is designed to distribute traffic across multiple suitable members?

1. Best Quality
2. Manual
3. Lowest Cost
4. Load Balance

Correct Answer: 4

Explanation

Load Balance is designed to distribute traffic across multiple eligible SD-WAN members. This can improve utilization when several WAN links are available and meet the requirements of the configured rule. Instead of relying on a single connection, traffic can be distributed according to the selected load-balancing behavior. This strategy is different from Best Quality, which emphasizes path quality, and Lowest Cost, which considers cost-related preferences. Administrators should evaluate bandwidth, application requirements, WAN reliability, and business priorities before selecting a strategy. Proper configuration helps ensure that available WAN resources are used efficiently.

Question 203

Which Fortinet platform provides centralized configuration management for multiple FortiGate devices?

1. FortiManager
2. FortiAnalyzer
3. FortiMail
4. FortiWeb

Correct Answer: 1

Explanation

FortiManager provides centralized configuration and device management for multiple FortiGate systems. It is especially useful in large SD-WAN deployments where branch devices require standardized settings. Administrators can centrally manage configurations, policies, and other device information instead of making every change individually on each FortiGate. This can reduce administrative effort and improve consistency across the network. FortiAnalyzer has a different primary role involving log collection, analysis, and reporting. Using both products together can provide centralized configuration management through FortiManager and centralized operational visibility through FortiAnalyzer.

Question 204

Which metric describes variation in packet delivery delay?

1. Latency
2. Packet loss
3. Jitter
4. Throughput

Correct Answer: 3

Explanation

Jitter represents variation in packet delivery delay. It is especially important for applications that require consistent packet timing, such as voice and video conferencing. A WAN path can have acceptable average latency but still experience high jitter because individual packets arrive with significantly different delays. FortiGate can monitor jitter through Performance SLA and compare the measurement against configured thresholds. If the jitter becomes unacceptable, an SD-WAN rule can potentially select another suitable member. Monitoring jitter separately from latency helps administrators better understand whether a WAN path is suitable for real-time applications.

Question 205

Which technology commonly provides encrypted connectivity between FortiGate devices over an Internet connection?

1. IPsec VPN
2. DHCP
3. DNS
4. NTP

Correct Answer: 1

Explanation

IPsec VPN is commonly used to provide encrypted connectivity between FortiGate devices over Internet or other WAN transports. In an SD-WAN architecture, IPsec tunnels can form part of the secure overlay while the underlying Internet or WAN connection acts as the transport. Multiple tunnels can provide redundancy and additional path choices. FortiGate can monitor these paths through Performance SLA and use SD-WAN rules to determine how traffic should be forwarded. IPsec therefore provides secure logical connectivity, while SD-WAN adds intelligent traffic steering and path-selection capabilities.

Question 206

Which feature can identify traffic destined for predefined Internet services in an SD-WAN rule?

1. ARP table
2. Internet Service Database
3. DHCP relay
4. MAC address table

Correct Answer: 2

Explanation

The Internet Service Database provides predefined information about supported Internet services and their associated destinations. SD-WAN rules can use ISDB information to identify traffic without requiring administrators to manually maintain every individual destination IP address. This is particularly useful for cloud applications and Internet services that may use many addresses or change their infrastructure over time. Administrators can associate specific services with suitable SD-WAN strategies and Performance SLA requirements. This reduces policy maintenance and provides a practical method for steering traffic toward recognized Internet services according to business and application requirements.

Question 207

What does packet loss measure in a Performance SLA?

1. The percentage of packets that fail to reach the destination
2. The average packet delay
3. The variation in packet timing
4. The available bandwidth

Correct Answer: 1

Explanation

Packet loss measures packets that fail to successfully reach their intended destination. It is an important indicator of WAN quality because high loss can negatively affect application performance. Real-time applications such as voice and video can experience interruptions, while data applications may require retransmissions that increase delays. FortiGate Performance SLA can monitor packet loss and compare it with configured thresholds. If a WAN member exceeds the acceptable loss level, SD-WAN can potentially select another eligible member according to the applicable rule. This allows traffic to avoid paths experiencing significant delivery problems.

Question 208

Which topology uses central hub locations to connect multiple branch sites?

1. Full Mesh
2. Ring
3. Hub-and-Spoke
4. Peer-to-Peer

Correct Answer: 3

Explanation

A hub-and-spoke topology uses one or more central hub locations to connect multiple branch or spoke sites. This design simplifies centralized routing, security inspection, and management. Traditionally, branch-to-branch traffic may pass through the hub, which can create additional traffic flow and latency. Fortinet technologies such as ADVPN can provide more direct branch connectivity when appropriate. SD-WAN can be deployed within a hub-and-spoke design to select paths based on application requirements, WAN quality, and configured policies. The topology is commonly used when centralized control and scalable branch connectivity are important.

Question 209

Which protocol can provide dynamic route exchange across an SD-WAN network?

1. BGP
2. FTP
3. SMTP
4. DHCP

Correct Answer: 1

Explanation

BGP can provide dynamic route exchange between FortiGate devices and other routing domains. This is useful in larger SD-WAN environments where manually maintaining many static routes would become difficult. BGP can advertise reachable networks and update routing information when topology changes occur. It can operate across suitable VPN overlays and support routing policies for controlling advertisements and route selection. The exact implementation depends on the network topology, addressing design, and business requirements. Proper route filtering and policy configuration are important to ensure predictable routing behavior in a large SD-WAN environment.

Question 210

Which Fortinet platform is primarily used for centralized log collection and analysis?

1. FortiManager
2. FortiAnalyzer
3. FortiGate
4. FortiSwitch

Correct Answer: 2

Explanation

FortiAnalyzer is primarily designed for centralized log collection, analysis, reporting, and monitoring. FortiGate devices can forward their logs to FortiAnalyzer, allowing administrators to investigate activity from multiple devices through a centralized interface. In an SD-WAN environment, this can assist with troubleshooting connectivity issues, reviewing traffic behavior, and analyzing events across branch locations. FortiManager has a different primary function focused on centralized device and configuration management. Using both platforms together can provide centralized control over FortiGate configurations and centralized visibility into operational and security events.

Question 211

Which SD-WAN strategy focuses on selecting a path based on measured network quality?

1. Best Quality
2. Load Balance
3. Manual
4. Lowest Cost

Correct Answer: 1

Explanation

Best Quality focuses on selecting a suitable path according to measured WAN performance. FortiGate can use Performance SLA measurements such as latency, jitter, and packet loss when evaluating available members. This strategy is useful for applications where network quality is more important than simply minimizing cost. If the preferred path becomes degraded, another member that satisfies the required conditions may become preferable. Administrators should configure appropriate SLA thresholds based on application requirements. Correct threshold values help prevent poor-quality links from being selected while avoiding unnecessarily excluding WAN paths that are still usable.

Question 212

Which FortiManager feature helps administrators deploy similar configurations to multiple branch FortiGates?

1. Packet Capture
2. Configuration Templates
3. Traffic Shaping
4. DNS Filtering

Correct Answer: 2

Explanation

Configuration Templates in FortiManager help administrators standardize and deploy similar configurations across multiple FortiGate devices. This is useful in SD-WAN environments where branches often require common settings for interfaces, routing, VPNs, firewall policies, and SD-WAN rules. Templates reduce repetitive manual configuration and can improve consistency between branch devices. Device-specific information can still be customized when necessary. As the number of branches increases, centralized configuration templates can significantly simplify administration. They also provide a more structured method for applying planned configuration changes across multiple managed FortiGate devices.

Question 213

What is the primary function of an SD-WAN rule?

1. To store system logs
2. To create administrator accounts
3. To determine how matching traffic is steered
4. To assign DHCP addresses

Correct Answer: 3

Explanation

An SD-WAN rule determines how matching traffic should be handled across available SD-WAN members. Administrators can define matching criteria such as source, destination, application, service, or Internet Service Database information. The rule then applies a selected strategy to determine an appropriate path. Performance SLA information can influence whether individual members are eligible. This allows different traffic types to receive different WAN treatment. For example, business-critical applications can be assigned paths with stricter quality requirements, while general Internet traffic can use another strategy. SD-WAN rules therefore provide policy-based traffic steering.

Question 214

Which Performance SLA metric is especially important for real-time voice traffic because it measures inconsistent packet timing?

1. Packet Loss
2. Jitter
3. Latency
4. Throughput

Correct Answer: 2

Explanation

Jitter is particularly important for real-time voice traffic because it measures variation in packet delivery timing. Voice communication requires packets to arrive relatively consistently. Significant timing variation can produce audio distortion, interruptions, or other quality problems. FortiGate can monitor jitter through Performance SLA and use configured thresholds when evaluating WAN paths. An SD-WAN rule can then prefer members that meet the required quality conditions. Although latency and packet loss are also important for voice, jitter specifically addresses inconsistent packet timing, making it a critical metric for real-time communication.

Question 215

What can occur when an SD-WAN member fails the Performance SLA requirements for a rule?

1. It can become ineligible for the affected traffic
2. FortiGate automatically shuts down
3. All VPN configurations are deleted
4. Every firewall policy is disabled

Correct Answer: 1

Explanation

When an SD-WAN member fails the Performance SLA requirements associated with a rule, it can become ineligible for traffic governed by that rule. Failure can occur because of excessive latency, jitter, packet loss, or loss of reachability depending on the configured health check. If another member satisfies the required conditions, FortiGate can select that alternative according to the configured SD-WAN strategy. This provides dynamic failover and helps applications avoid degraded paths. The member itself is not necessarily physically disabled; its suitability for particular SD-WAN traffic is affected by the SLA result.

Question 216

Which technology can create dynamic shortcuts between branches in a suitable Fortinet hub-and-spoke deployment?

1. SNMP
2. ADVPN
3. DHCP
4. DNS

Correct Answer: 2

Explanation

ADVPN can create dynamic shortcut connectivity between branch sites in suitable hub-and-spoke deployments. In a traditional hub-and-spoke architecture, traffic between two branches may travel through a central hub. This can create unnecessary traffic hairpinning and increase latency. ADVPN can dynamically establish more direct communication when the necessary conditions are satisfied. Fortinet deployments can combine ADVPN with IPsec and dynamic routing technologies to create scalable branch connectivity. The exact behavior depends on topology, routing configuration, tunnel settings, and supported FortiOS functionality.

Question 217

Which metric represents the delay experienced by packets across a monitored WAN path?

1. Latency
2. Jitter
3. Packet Loss
4. Bandwidth

Correct Answer: 1

Explanation

Latency represents the delay experienced by packets while traveling across a monitored WAN path. It is an important metric for interactive applications because excessive delay can make communication slow or difficult. FortiGate can monitor latency through Performance SLA health checks and compare the measured value with configured thresholds. If latency becomes too high, the associated SD-WAN rule may consider another eligible member. Latency differs from jitter, which measures variation in delay, and packet loss, which measures packets that fail to reach their destination. Monitoring all these metrics provides a more complete view of WAN quality.

Question 218

Which strategy can consider WAN member cost while requiring the selected path to meet SLA conditions?

1. Load Balance
2. Best Quality
3. Lowest Cost (SLA)
4. Manual

Correct Answer: 3

Explanation

Lowest Cost (SLA) considers WAN member cost while also taking Performance SLA requirements into account. This strategy is useful when an organization has multiple WAN connections with different costs and wants to use less expensive services whenever they provide acceptable performance. A lower-cost member can be preferred when it satisfies the required quality conditions. If it fails the SLA, another eligible path can be selected. This approach helps organizations balance operating expenses with application performance. Correct cost values and realistic SLA thresholds are essential for predictable path-selection behavior.

Question 219

Which architecture separates the physical WAN transport from the logical network connectivity?

1. Underlay and Overlay
2. User and Group
3. Policy and Profile
4. DNS and DHCP

Correct Answer: 1

Explanation

Underlay and overlay architecture separates the physical WAN transport from logical network connectivity. The underlay may consist of Internet, MPLS, LTE, or other WAN services. The overlay can use technologies such as IPsec tunnels to provide logical and encrypted connectivity between network locations. SD-WAN can evaluate available paths and steer traffic according to configured policies and Performance SLA measurements. This separation allows organizations to use different transport technologies without redesigning the entire logical network. It also provides flexibility when WAN services need to be added, removed, or changed.

Question 220

Which combination allows FortiGate to steer application traffic according to both policy and current WAN conditions?

1. DHCP and DNS
2. Application-aware SD-WAN rules and Performance SLA
3. ARP and MAC learning
4. SNMP and NTP

Correct Answer: 2

Explanation

Application-aware SD-WAN rules combined with Performance SLA allow FortiGate to consider both traffic requirements and current WAN path quality. The SD-WAN rule identifies the relevant application or traffic category and defines the desired steering behavior. Performance SLA supplies information about the current condition of available paths, including metrics such as latency, jitter, packet loss, and reachability. FortiGate can then select an eligible member that satisfies the required conditions. This approach is useful when different applications need different WAN treatment and when network quality can change dynamically over time.