Online Access Free NSE6_SDW_AD-7.6 Exam Questions

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

• A.Each template group can contain up to three IPsec tunnel templates.
• B.A CLI template can be of type CLI script or Perl script.
• C.A CLI template group can contain CLI templates of both types.
• D.CLI templates are applied in order, from top to bottom.
• E.A template group can include a system template and an SD-WAN template.

Your FortiGate is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN.
What must you do as part of this configuration update process?

• A.Purchase and install the SD-WAN license, and reboot the FortiGate device.
• B.Replace references to interfaces used as SD-WAN members in the firewall policies.
• C.Replace references to interfaces used as SD-WAN members in the routing configuration.
• D.Disable the interface that you want to use as an SD-WAN member.

You manage an SD-WAN topology and you will soon deploy 50 new branches.
Which two tasks can you do in advance to simplify this deployment? (Choose two.)

• A.Define metadata variable values for each device.
• B.Create a zero-touch provisioning (ZTP) template.
• C.Create model devices.
• D.Create a policy blueprint.

Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown. Which statement best describes the cause of the issue?

• A.You can assign only one IPsec template to each FortiGate device.
• B.You should review the branch1_fgt configuration for configured tunnels in the root VDOM.
• C.You should use the same outgoing interface of both templates.
• D.You can assign only one template with a tunnel type of static to each FortiGate device.

Refer to the exhibits.


An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit.
After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD- WAN rule? (Choose two.)

• A.The session 3-tuple did not match any of the existing entries in the ISDB application cache.
• B.No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting.
• C.FortiGate could not refresh the routing information on the session after the application was detected.
• D.Full SSL inspection is not enabled on the matching firewall policy.