Free Practice Questions for Fortinet NSE5_SSE_AD-7.6 Exam

The correct answer is C. FortiGate routes the traffic flow according to the FIB. The exhibit shows a regular policy route configured with source 10.0.1.128/255.255.255.128 and destination 128.66.0.0/255.255.255.0. The test source 10.0.1.130 belongs to the 10.0.1.128/25 subnet, and destination 128.66.0.125 belongs to 128.66.0.0/24; therefore, the traffic matches this policy route.

Crucially, the route contains set action deny. For a router policy, this does not mean that FortiGate discards the packet as a firewall DENY would. It represents Stop Policy Routing. Fortinet explains that when a packet matches this action, FortiGate stops policy-route processing and routes the packet using the forwarding information base (FIB).

Regular policy routes also have precedence over SD-WAN rules. Consequently, even though SD-WAN service 4 shown in the exhibit matches source 10.0.1.0-10.0.1.255 and destination 128.66.0.0-128.66.255.255, its round-robin selection of port1 and port2 does not control this flow. The matching regular policy route terminates policy routing first.

Study Guide Reference: SD-WAN Configuration and Monitoring > Policy Routes > Route Lookup and FIB Processing, pages 423–424.

The priority/failover connection feature uses the remote user ' s geolocation to determine the preferred location where the VPN connection should terminate. Administrators can build country-based rules that prioritize either an on-premises FortiGate VPN gateway or a FortiSASE security POP. The FortiSASE study guide gives a specific example in which users connecting from Canada first attempt to establish the VPN with an on-premises FortiGate; if that device is unavailable, FortiClient fails over to the configured FortiSASE security POP. FortiSASE_25_Administrator_Stud… This is particularly useful for global organizations that want selected users to continue using regional on-premises infrastructure while retaining cloud-based resiliency. It is not load balancing across every POP, mandatory nearest-POP selection, or simple geolocation blocking. Therefore, option B precisely describes the feature ' s purpose.

FortiView is designed to transform FortiSASE log information into aggregated, consolidated views that make operational and security analysis easier than reviewing individual raw log entries. The study guide describes FortiView as a consolidated series of consoles that enables administrators to analyze security events over a selected time period and according to different sorting criteria. It can display the resulting information through both graphical and text-based consoles and presents metadata derived from available logs rather than simply listing every log individually. FortiSASE_25_Administrator_Stud… Therefore, option D accurately describes FortiView. Options A and C incorrectly remove aggregation and flexible sorting, while B incorrectly characterizes FortiView primarily as an alert-generation mechanism and limits its presentation to a single text console. FortiView ' s core purpose is consolidated visibility and analysis.

================

According to the SD-WAN 7.6 Core Administrator curriculum, to implement an SD-WAN solution that ensures high network availability for business-critical applications while managing costs, the administrator must configure at least two WAN links.

SD-WAN Fundamentals: SD-WAN operates by creating a virtual overlay across multiple physical or logical transport links (e.g., broadband, LTE, MPLS). Without at least two links, the SD-WAN engine has no alternative path to steer traffic toward if the primary link fails or degrades.

Cost Management: By using multiple links, administrators can implement the Lowest Cost (SLA) or Maximize Bandwidth strategies. This allows the site to use a low-cost broadband connection for primary traffic and only failover to a " pay-per-use " backup (like LTE) when the primary link ' s quality falls below the defined SLA target.

High Availability (Link Level): While a " High Availability (HA) cluster " (Option C) provides device redundancy (protecting against a hardware failure of the FortiGate itself), it does not address link redundancy or steering, which are the core functions of SD-WAN for application uptime.

Why other options are incorrect:

Option A: Using a mid-range device refers to hardware capacity but does not solve the requirement for link-level redundancy and cost-steering logic.

Option B: Dynamic routing (like BGP or OSPF) is often used with SD-WAN in large topologies, but for a small site, the primary mechanism for meeting availability and cost goals is the configuration of the SD-WAN member links and rules themselves.

Option C: HA clusters protect against hardware failure, but the question specifically asks about ensuring availability for applications while limiting backup link costs, which is a traffic-steering (SD-WAN) requirement rather than a hardware-redundancy requirement.

In the SD-WAN 7.6 Core Administrator curriculum, steering " local-out " traffic (traffic generated by the FortiGate itself, such as DNS queries, FortiGuard updates, or diagnostic pings) requires specific configuration because this traffic follows a different path than " forward " traffic.

Individual Configuration (Option A): By default, local-out traffic bypasses the SD-WAN engine and uses the standard system routing table (RIB/FIB). To use SD-WAN rules for specific features like DNS or RADIUS, you must individually enable the sdwan interface-select-method within that feature ' s configuration (e.g., config system dns or config user radius).

Default Steerable Traffic (Option B): In FortiOS 7.6, while most local-out traffic is excluded from SD-WAN by default, the system is designed so that when SD-WAN is active, it primarily considers SD-WAN rules for specific diagnostic local-out traffic—specifically ping and traceroute—to allow administrators to verify path quality using the same logic as user traffic.

Why other options are incorrect:

Option C: Local-out traffic can be steered using any SD-WAN strategy (Manual, Best Quality, etc.), provided the interface-selection-method is set to sdwan.