Free Fortinet NSE 7 - FortiSASE 26 Architect Practice Questions

FortiGate first establishes destination reachability and then evaluates the eligible members of the matching SD-WAN service. The exhibit reports that traffic for the corporate network is reaching HUB1-VPN3 even though HUB1-VPN1 appears earlier in member preference. Option C is supported if HUB1-VPN1 has no valid route for the exact destination prefix. An SD-WAN service cannot force traffic through an overlay member that does not provide reachability. The candidate ' s second answer, D, is less precise: the exhibit presents SD-WAN member preference or priority values, whereas the wording says ' route priority ' . FortiOS distinguishes route priority in the FIB from the preference order defined in an SD-WAN service. A smaller numerical member preference can influence forwarding, but it should not be described as proof of a more-preferred static route. Option A reverses the ranking, and option B invents an overriding conventional policy route not established by the diagnostic output. As presented, C is secure but the complete C,D pair depends on interpreting D as member priority rather than routing-table priority. Validate the actual route entries, their administrative distance and priority, and ' diagnose sys sdwan service4 ' before treating D as conclusive.

Verification qualification: The choice concerning route priority is imprecisely worded; displayed member priority is not necessarily static-route priority.

FortiGate SD-WAN uses traffic-classification criteria to identify application flows and apply appropriate forwarding strategies based on business priorities and link-performance requirements.

Option C is correct because application categories can be used to identify traffic belonging to defined application groups. This capability enables administrators to steer business-critical applications through preferred WAN paths while directing less-sensitive traffic through alternative links.

Application-aware SD-WAN rules can use FortiGuard application identification to make forwarding decisions without relying exclusively on destination IP addresses or transport ports.

Option D is correct because the Internet Service Database provides predefined classifications for cloud services and internet applications. FortiGate can use ISDB objects in SD-WAN service rules to steer traffic toward destinations associated with services such as Microsoft 365 and other cloud applications.

Option A is incorrect because physical interface type is not one of the application or destination matching criteria represented by this question. SD-WAN members identify eligible forwarding interfaces, which is distinct from the traffic-classification criteria.

Option B is incorrect because BGP attributes influence routing decisions and route selection but are not directly equivalent to the application and ISDB matching criteria used by these service rules.

Together, application-category and ISDB matching provide granular, application-aware steering.