FCSS_SDW_AR-7.6 Exam Questions
78 real FCSS_SDW_AR-7.6 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1SD-WAN Deployment Strategies
You manage an SD-WAN topology. You will soon deploy 50 new branches. Which three tasks can you do in advance to simplify this deployment? (Choose three.)
ZTP templatemodel devicesmetadata variablesdeployment preparation - Question #2Advanced Routing and VPN for SD-WAN
You are planning a new SD-WAN deployment with the following criteria: - Two regions - Most of the traffic is expected to remain within its region - No requirement for inter-region...
BGP overlay routingIBGPmulti-regionADVPN - Question #3Advanced Routing and VPN for SD-WAN
Refer to the exhibit. The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit. Based on the configuration, which three conclus...
IPsec tunnelIKEv2tunnel interface IPoverlay addressing - Question #4SD-WAN Fundamentals
You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rul...
SD-WAN memberzone managementGUI deletionmember removal - Question #5SD-WAN Fundamentals
Refer to the exhibits. The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate. The administrator increases the member...
SNATdirty sessionmember prioritysession routing - Question #6SD-WAN Business Application Policies
Refer to the exhibits. The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configura...
performance SLAapplication health checkTCP measurementmember status - Question #7SD-WAN Troubleshooting and Monitoring
When you use the command diagnose sys session list, how do you identify the sessions that correspond to traffic steered according to SD-WAN rules?
session listsdwan_service_iddiagnose commandSD-WAN session flags - Question #8SD-WAN Fundamentals
SD-WAN interacts with many other FortiGate features. Some of them are required to allow SD- WAN to steer the traffic. Which three configuration elements that you must configure bef...
SD-WAN prerequisitesfirewall policyroutinginterfaces - Question #9SD-WAN Orchestration and Management
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
provisioning templatesCLI templatestemplate groupsFortiManager - Question #10SD-WAN Orchestration and Management
Refer to the exhibit. An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs. Which t...
SD-WAN monitortopology viewtunnel statusFortiManager - Question #11Advanced Routing and VPN for SD-WAN
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
ADVPN 2.0ADVPN upgradeSD-WAN branchesshortcut negotiation - Question #12SD-WAN Business Application Policies
Refer to the exhibits. An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first ex...
application steeringISDB cachesession routingimplicit SD-WAN rule - Question #13SD-WAN Fundamentals
Which statement describes FortiGate behavior when you reference a zone in a static route?
static routesSD-WAN zonesECMProuting behavior - Question #14SD-WAN Troubleshooting and Monitoring
Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects th...
SD-WAN rulespolicy routesroute prioritytroubleshooting - Question #15Advanced Routing and VPN for SD-WAN
Refer to the exhibit. The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram. Wh...
auxiliary-sessionreply trafficasymmetric routingdata center connectivity - Question #16SD-WAN Deployment Strategies
When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management an...
MSSPhub placementSIAcentralized breakout - Question #17SD-WAN Orchestration and Management
The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks....
overlay templatepost-run taskspolicy packagesSD-WAN rules - Question #18SD-WAN Troubleshooting and Monitoring
Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings. FortiManager prompts you with the error "Copy Failed"...
FortiManagermetadata variablesinstallation errorper-device mapping - Question #19SD-WAN Fundamentals
Within the context of SD-WAN, what does SIA correspond to?
SIAremote breakoutSD-WAN terminologyinternet access - Question #20SD-WAN Orchestration and Management
Refer to the exhibit. The administrator used the SD-WAN overlay template to prepare an IPsec tunnels configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the FortiM...
overlay templatehub deviceADVPNinstallation preview - Question #21SD-WAN Deployment Strategies
Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager di...
IPsec templatesFortiManagertemplate assignmentVPN tunnels - Question #22SD-WAN Fundamentals
Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?
SD-WAN zoneszone membersoverlay zonesunderlay zones - Question #23SD-WAN Business Application Policies
Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device The administrator wants to know through which interface Fo...
application steeringdiagnose sdwan serviceISDBsocial media traffic - Question #24SD-WAN Orchestration and Management
Refer to the exhibit. For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before...
ZTP deploymentFortiManagerCSV importdevice blueprint - Question #25SD-WAN Fundamentals
An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)
load balancing strategiesoutbandwidth hashSLAECMP - Question #26SD-WAN Fundamentals
Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)
implicit SD-WAN ruleECMP modepolicy routessession flags - Question #27Advanced Routing and VPN for SD-WAN
Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?
ADVPNshortcut query forwardinghub roledual-region topology - Question #28SD-WAN Orchestration and Management
Refer to the exhibits. You use FortiManager to manage the branch devices and configure the SD- WAN template. You have configured direct internet access (DIA) for the IT department...
SIADIAFortiManager installSD-WAN member reference - Question #29SD-WAN Fundamentals
What are three key routing principles of SD-WAN? (Choose three.)
routing precedencepolicy routesSD-WAN rulesroute selection - Question #30SD-WAN Business Application Policies
Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred mem...
SLA monitoringpacket loss thresholdpreferred memberbest quality strategy - Question #31Advanced Routing and VPN for SD-WAN
Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2. Which two configuration settings are required for th...
ADVPN cross-hubauto-discovery-forwarderauto-discovery-senderinter-region shortcuts - Question #32SD-WAN Business Application Policies
Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?
traffic steeringSD-WAN service rulesinterface selectionrouting analysis - Question #33SD-WAN Deployment Strategies
Refer to the exhibit. You want to configure SD-WAN on a network as shown in the exhibit. The network contains many FortiGate devices. Some are used as NGFW, and some are installed...
deployment planningtopology designmixed device typesFortiExtender - Question #34Advanced Routing and VPN for SD-WAN
Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?
ADVPN shortcutsevent logsshortcut tunnelsVPN analysis - Question #35SD-WAN Troubleshooting and Monitoring
Refer to the exhibit. Which action will FortiGate take if it detects SD-WAN members as dead?
dead detectioninterface actionlink monitoringfailover - Question #36Advanced Routing and VPN for SD-WAN
You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD...
BGP on loopbackADVPN routingFortiSASE integrationlarge-scale deployment - Question #37SD-WAN Business Application Policies
Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Bas...
traffic steeringinterface selectionSD-WAN rulesdiagnostic analysis - Question #38SD-WAN Business Application Policies
Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as s...
feature visibilityapplication destinationGUI configurationSD-WAN rules - Question #39SD-WAN Fundamentals
Which statement about SD-WAN zones is true?
SD-WAN zoneszone memberszone limitsVDOM - Question #40SD-WAN Fundamentals
Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)
implicit SD-WAN ruleECMPpolicy routessession details - Question #41SD-WAN Orchestration and Management
In which SD-WAN template field can you use a metadata variable?
metadata variablesSD-WAN templatesFortiManagertemplate fields - Question #42SD-WAN Troubleshooting and Monitoring
Refer to the exhibit, which shows output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health ch...
health check statusSLA targetsdiagnose commandsmember interfaces - Question #43SD-WAN Orchestration and Management
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the...
dynamic interface mappingpolicy package installationFortiManagerLAN interface - Question #44SD-WAN Deployment Strategies
What is true about SD-WAN multiregion topologies?
multiregion topologySD-WAN regionsADVPNhub-spoke - Question #45Advanced Routing and VPN for SD-WAN
Refer to the exhibit that shows VPN event logs on FortiGate. Based on the output shown in the exhibit, which statement is true?
ADVPN shortcutsVPN event logsshortcut tunnelmaster tunnel - Question #46SD-WAN Orchestration and Management
Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error "Copy Failed"...
FortiManager installation errormetadata variablesper-device mappingSD-WAN member gateway - Question #47SD-WAN Business Application Policies
You configured an SD-WAN rule with the best quality strategy and selected the predefined health check, Default_FortiGuard, to check the link performances against FortiGuard servers...
best quality strategylink quality indexcustom profiletraffic steering order - Question #48SD-WAN Business Application Policies
Refer to the exhibit. What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company's SMTP ma...
traffic steeringSD-WAN rule matchingSMTP trafficsource destination analysis - Question #49SD-WAN Business Application Policies
Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly int...
internet serviceSD-WAN rulesapplication destinationsstandalone FortiGate - Question #50SD-WAN Troubleshooting and Monitoring
An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users...
SD-WAN member removalstatic routestraffic interruptionrouting