FCSS_SDW_AR-7.4 Exam Questions

You manage an SD-WAN topology. You will soon deploy 50 new branches. Which three tasks can you do in advance to simplify this deployment? (Choose three.)

You are planning a new SD-WAN deployment with the following criteria: - Two regions - Most of the traffic is expected to remain within its region - No requirement for inter-region...

Refer to the exhibit. The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit. Based on the configuration, which three conclus...

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rul...

Refer to the exhibits. The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate. The administrator increases the member...

Refer to the exhibits. The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configura...

When you use the command diagnose sys session list, how do you identify the sessions that correspond to traffic steered according to SD-WAN rules?

SD-WAN interacts with many other FortiGate features. Some of them are required to allow SD- WAN to steer the traffic. Which three configuration elements that you must configure bef...

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

Refer to the exhibit. An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs. Which t...

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Refer to the exhibits. An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first ex...

Which statement describes FortiGate behavior when you reference a zone in a static route?

Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects th...

Refer to the exhibit. The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram. Wh...

When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management an...

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks....

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings. FortiManager prompts you with the error "Copy Failed"...

Within the context of SD-WAN, what does SIA correspond to?

Refer to the exhibit. The administrator used the SD-WAN overlay template to prepare an IPsec tunnels configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the FortiM...

Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager di...

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?

Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device The administrator wants to know through which interface Fo...

Refer to the exhibit. For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before...

An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)

Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?

Refer to the exhibits. You use FortiManager to manage the branch devices and configure the SD- WAN template. You have configured direct internet access (DIA) for the IT department...

What are three key routing principles of SD-WAN? (Choose three.)

Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred mem...

Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2. Which two configuration settings are required for th...

Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?

Refer to the exhibit. You want to configure SD-WAN on a network as shown in the exhibit. The network contains many FortiGate devices. Some are used as NGFW, and some are installed...

Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?

Refer to the exhibit. Which action will FortiGate take if it detects SD-WAN members as dead?

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD...

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Bas...

Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as s...

Which statement about SD-WAN zones is true?

Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

In which SD-WAN template field can you use a metadata variable?

Refer to the exhibit, which shows output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health ch...

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the...

What is true about SD-WAN multiregion topologies?

Refer to the exhibit that shows VPN event logs on FortiGate. Based on the output shown in the exhibit, which statement is true?

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error "Copy Failed"...

You configured an SD-WAN rule with the best quality strategy and selected the predefined health check, Default_FortiGuard, to check the link performances against FortiGuard servers...

Refer to the exhibit. What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company's SMTP ma...

Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly int...

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users...