Fortinet FCSS - SD-WAN 7.4 Architect - FCSS_SDW_AR-7.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

A. HUB1-VPN1 B. port1 C. port4 D. port2

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

A. Update the IPsec tunnel configurations on the hub. B. Update the IPsec tunnel configuration on the branches. C. Update the SD-WAN configuration on the branches. D. Delete the existing ADVPN configuration and configure ADVPN 2.0.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits. The interface details, static route configuration, and firewall policies on the managed FortiGate device are shown.
You want to configure a new SD-WAN zone, named Underlay, that contains the interfaces port1 and port2.
What must be your first action?

A. Delete the SD-WAN Zone Test. B. Define port1 as an SD-WAN member. C. Delete the static routes. D. Delete the firewall policies.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

A. When HUB1-VPN1 has 12% packet loss B. When HUB1-VPN1 has 4% packet loss C. When all three members have the same packet loss D. When HUB1-VPN3 has 4% packet loss

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit, which shows the SD-WAN rule status and configuration.

Based on the exhibit, which change in the measured latency will first make HUB1-VPN3 the new preferred member?

A. When HUB1-VPN3 has a lower latency than HUB1-VPN1 and HUB1-VPN2 B. When HUB1-VPN1 has a latency of 200 ms C. When HUB1-VPN3 has a latency of 80 ms D. When HUB1-VPN3 has a latency of 90 ms

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits. The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configuration and the underlay zone status. Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choose two.)

A. Encrypted traffic is not used for the performance measurement. B. The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member. C. FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member. D. Only related TCP traffic is used for performance measurement.

Discussion 0

Correct Answer: B,D Vote an answer

Question 7

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule.
What could be a possible cause of the traffic interruption?

A. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration. B. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members. C. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN. D. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

A. By default, local-out traffic does not use SD-WAN. B. You can steer local-out traffic only with SD-WAN rules that use the manual strategy. C. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to pingand traceroute. D. You must configure each local-out feature individually to use SD-WAN.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).