Download Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator.NSE6_SDW_AD-7.6.ExamTopics.2026-10-11.45q.tqb

Vendor: Fortinet
Exam Code: NSE6_SDW_AD-7.6
Exam Name: Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator
Date: Oct 11, 2026
File Size: 10 MB

How to open TQB files?

Files with TQB (Taurus Question Bank) extension can be opened by Taurus Exam Studio.

Demo Questions

Question 1
Refer to the exhibit.
Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)
  1. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
  2. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.
  3. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
  4. On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
Correct answer: B, D
Question 2
Refer to the exhibits.
You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?
  1. HUB1-VPN1
  2. port1
  3. port4
  4. port2
Correct answer: D
Question 3
You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.
What happens if you delete the SD-WAN member from the FortiGate GUI?
  1. FortiGate accepts the deletion and places the member in the default SD-WAN zone.
  2. FortiGate accepts the SD-WAN member deletion with no further action.
  3. FortiGate accepts the deletion and removes static routes as required.
  4. FortiGate displays an error message. SD-WAN zones must contain at least two members.
Correct answer: C
Question 4
Refer to the exhibit that shows a diagnose output on a FortiGate device.
Based on the output shown in the exhibit, what can you conclude about the device role and how it handles health checks?
  1. The device is a spoke and it provides embedded health-check measures for each tunnel to the hub.
  2. The device is a spoke and it receives health-check measures for the tunnels of another spoke.
  3. The device is a hub and it receives embedded health-check measures for each tunnel from the spoke.
  4. The device is a hub and it receives health-check measures for the tunnels of a spoke.
Correct answer: A
Question 5
Refer to the exhibits.
An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit.
After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)
  1. No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting.
  2. Full SSL inspection is not enabled on the matching firewall policy.
  3. The session 3-tuple did not match any of the existing entries in the ISDB application cache.
  4. FortiGate could not refresh the routing information on the session after the application was detected.
Correct answer: A, D
Question 6
Refer to the exhibits.
You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings, FortiManager prompts you with the error “Copy Failed” for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit.
Based on the exhibits, which statement best describes the issue and how you can resolve it?
  1. Check the metadata variable definitions, and review the per-device mapping configuration.
  2. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.
  3. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port1 without metadata variables.
  4. Check the connection between branch1_fgt and FortiManager.
Correct answer: A
Question 7
Refer to the exhibits.
You collected the output shown in the exhibits and want to know which interface HTTP traffic will flow through from the user device 10.0.1.101 to the corporate web server 10.0.0.126.
All SD-WAN links are stable.
Which interface will use FortiGate to steer the traffic?
  1. Either HUB1-VPN1, HUB1-VPN2, or HUB1-VPN3
  2. Only HUB1-VPN3
  3. Only HUB1-VPN2
  4. Either HUB1-VPN2 or HUB1-VPN3
Correct answer: A
Question 8
Refer to the exhibits.
The SD-WAN zone configuration of an SD-WAN template prepared on FortiManager and the policy package configuration are shown.
When you try to install the configuration changes, FortiManager displays an error message.
How can you fix the issue?
  1. Configure a normalized interface for the IPsec tunnel HUB1-VPN1.
  2. Configure both HUB1-VPN1 and HUB1-VPN2 as the destination of policy 3.
  3. Configure HUB1 as the destination of policy 3.
  4. Configure branch1_fgt as the installation target for policy 3.
Correct answer: C
Question 9
Refer to the exhibits.
The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?
  1. The diagnose output was collected on the device branch1_fgt.
  2. The diagnose output shows that HUB1-VPN1 and all HUBx-VPNy members are dead.
  3. The diagnose output was collected on the device branch2_fgt.
  4. The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.
Correct answer: C
Question 10
Refer to the exhibits.
The SD-WAN zones and members configuration of two branch devices are shown.
The two branch devices are part of the same hub-and-spoke topology and connect to the same hub. The devices are configured to allow auto-discovery VPN (ADVPN). The configuration on the hub allows the initial communication between the two spokes.
When traffic flows require it, between which interfaces can the devices establish shortcuts?
  1. Any interface in the overlay zones
  2. Interface connected to HUB only.
  3. Between T2 on Branch-A and TA on Branch-B
  4. Between T3 on Branch-A and TC on Branch-B
Correct answer: D
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!