[2026] NSE6_SDW_AD-7.6 by Fortinet NSE 6 Actual Free Exam Practice Test [Q48-Q67]

Rate this post

[2026] NSE6_SDW_AD-7.6 by Fortinet NSE 6 Actual Free Exam Practice Test

Free Fortinet NSE 6 NSE6_SDW_AD-7.6 Exam Question

Fortinet NSE6_SDW_AD-7.6 Exam Syllabus Topics:

Topic	Details
Topic 1	SD-WAN troubleshooting: This domain explains how to diagnose and resolve issues related to SD-WAN operation. It includes troubleshooting SD-WAN rules, session behavior, routing problems, and ADVPN connectivity to maintain reliable network performance.
Topic 2	SD-WAN setup: This domain covers how to deploy an enterprise SD-WAN environment by designing SD-WAN members and zones and configuring them for efficient traffic management. It also focuses on implementing Performance SLAs to monitor link quality and ensure applications use the best available path.
Topic 3	Advanced IPsec: This section covers the deployment of advanced IPsec configurations within SD-WAN environments. It includes implementing hub-and-spoke IPsec topologies, configuring ADVPN, and supporting multihub, multiregion, and large-scale secure SD-WAN deployments.
Topic 4	Rules and routing: This section explains how to design and apply SD-WAN rules to control traffic steering across multiple WAN links. It also includes configuring SD-WAN routing to ensure proper path selection and connectivity between networks.
Topic 5	Centralized management: This domain focuses on deploying and managing SD-WAN using FortiManager for centralized control. It includes implementing branch configuration deployment and using SD-WAN Manager with overlay orchestration to simplify large-scale network management.

Q48. (Refer to the exhibit. You noticed that one SD-WAN member went down and you immediately collected the session output shown in the exhibit. What can you conclude from this output? Choose one answer.)

FortiGate didn’t receive any traffic related to this session after the interface went down.

FortiGate flushed the gateway for the session.

FortiGate cannot reevaluate the session.

FortiGate already reevaluated this session.

Q49. An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)

You can select the outbandwidth hash mode with all strategies that allow load balancing.

Only the manual and best-quality strategies allow SD-WAN load balancing.

When applicable, FortiGate load balances the traffic through all members that meet the SLA target.

SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

Q50. Refer to the exhibit.

Which statement best describe the role of the ADVPN device in handling traffic?

This is a spoke that has received a direct shortcut query from a remote spoke.

This is a hub, and two spokes, 192.2.0.1 and 10.0.3.101, establish a shortcut.

This is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.

This is a spoke that has received a shortcut query from a remote hub.

Q51. Refer to the exhibits.

To prepare to onboard FortiGate devices to your company ‘ s stores, you configure the device blueprint and CLI scripts shown in the exhibit. Then, a technician prepares a FortiGate 90G with a basic configuration and connects it to the network. The basic configuration contains the port1 configuration and the minimal configuration required to allow the device to connect to FortiManager.
After the device initially connects to FortiManager, FortiManager updates the device configuration.
Based on what is shown in the exhibits, which statement about the actions taken by FortiManager is true?

FortiManager updates the configuration of port1, port2, and port5. The three ports might get new IP addresses

FortiManager updates access rights only for port1. FortiManager cannot update the IP address because it was already set manually

FortiManager updates the device configuration according to the selected templates and it applies the corp_st template first

FortiManager does not update the port1 configuration because FortiManager does not change the configuration of interfaces with FortiGate-FortiManager communication protocol (FGFM) access

Q52. (In which order does FortiGate consider the following elements during the route lookup process? Choose one answer.)

SD-WAN rules, ISDB routes, policy routes, BGP routes

Policy routes, SD-WAN rules, Internet Service Database (ISDB) routes, BGP routes

SD-WAN rules, policy routes, static routes, ISDB routes

Policy routes, ISDB routes, SD-WAN rules, static routes

Q53. You are configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Delete the existing ADVPN configuration and configure ADVPN 2.0.

Update the IPsec tunnel configuration on the branches.

Update the IPsec tunnel configurations on the hub.

Update the SD-WAN configuration on the branches.

Q54. Refer to the exhibit.

You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly internet link. The FortiGate GUI page appears as shown in the exhibit.
What should you do to set Facebook and LinkedIn as destinations?

Install a license to allow applications as destinations of SD-WAN rules.

In the Internet service field, select Facebook and LinkedIn.

Enable the applications as destinations of the SD-WAN rule feature visibility.

You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

Q55. Refer to the exhibit, which shows output of the command diagnose sys sdwan health-check status collected on a FortiGate device.

Which two statements are correct about the health check status on this FortiGate device?
(Choose two.)

The interface T_INET_0 missed three SLA targets.

The interface T_INET_1 missed one SLA target.

There is no SLA criteria configured for the health-check Level3_DNS.

The health-check VPN_PING orders the members according to the measured jitter.

Q56. Refer to the exhibit. For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before you can import it into FortiManager? (Choose two.)

You must associate a device blueprint with each device

You must define a name for each device

You must define a value for each device and each metadata variable that defines an IP address.

You must define a value for each device and each user-defined metadata variable.

Q57.

Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?

You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with Forti Extender.

You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.

You must use FortiManager to manage your SD-WAN topology.

You must build multiple SD-WAN topologies. Each topology must contain only one type of extension.

Q58. You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)

Create a ZTP template.

Create policy blueprint.

Update the DHCP server configuration.

Create model devices.

Define metadata variables value for each device.

Q59. When you use the command diagnose sys session list, how do you identify the sessions that correspond to traffic steered according to SD-WAN rules?

You identify sessions steered according to SD-WAN rules with the flag vwl.

You cannot identify SD-WAN sessions. You must use the sdwan session filter.

You identify sessions steered according to SD-WAN rules with the data vwl_mbr_seq.

You identify sessions steered according to SD-WAN rules with the data sdwan_service_id.

Q60. Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

Member metrics are measured only if a rule uses the SLA target.

SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.

SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.

Q61. You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Update the IPsec tunnel configurations on the hub.

Update the SD-WAN configuration on the branches.

Update the IPsec tunnel configuration on the branches.

Delete the existing ADVPN configuration and configure ADVPN 2.0.

Q62. Within the context of SD-WAN, what does SIA correspond to?

Remote Breakout

Local Breakout

Software Internet Access

Secure Internet Authorization

Q63. Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

The session information output displays no SD-WAN service id.

Traffic is load balanced using the algorithm set for the v4-ecmp-modesetting.

The traffic is distributed, regardless of weight, through all available static routes.

Traffic does not match any of the entries in the policy route table.

FortiGate flags the session with may_dirtyand vwl_default.

Q64. You want FortiGate to steer all DNS traffic either going through FortiGate or Initiated by FortiGate
– according to SD-WAN rules. Which two constraints should you consider? (Choose two.)

By default, FortiGate uses SD-WAN rules for only the primary DNS server.

You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

By default, local-out DNS traffic does not use SD-WAN.

You must configure each local-out feature individually to use SD-WAN.

Q65. Refer to the exhibit.

Which two conclusions can you draw from the output shown? (Choose two.)

One SD-WAN rule is defined with application categories as the destination.

UDP traffic destined to the subnet 10.22.0.0/24 matches a manual SD-WAN rule.

One SD-WAN rule allows traffic load balancing.

UDP traffic destined to the subnet 10.22.0.0/24 matches a policy route.

Q66. An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)

You can select the outbandwidth hash mode with all strategies that allow load balancing.

Only the manual and best-quality strategies allow SD-WAN load balancing.

When applicable. FortiGate load balances the traffic through all members that meet the SLA target.

SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

Q67. (Refer to the exhibit.

You configure SD-WAN on a standalone FortiGate device.
You want to create an SD-WAN rule that steers traffic related to Facebook and LinkedIn through the less costly internet link.
What must you do to set Facebook and LinkedIn applications as destinations from the GUI? Choose one answer.)