Free FCSS_SDW_AR-7.6: FCSS - SD-WAN 7.6 Architect Exam Questions and Answers

Refer to the exhibit. The exhibit shows the health-check configuration on a FortiGate device used as a spoke. You notice that the hub FortiGate doesn't prioritize the traffic as expected. Which two configuration elements should you check on the hub? (Choose two.)

Select 2 answers.

• AA. The performance SLA has the parameter priority-out-sla configured.
• BB. This performance SLA uses the same members.
• CC. The performance SLA uses the same criteria.
• DD. The performance SLA is configured with set embedded-measure accept.

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

• AA. port4
• BB. HUB1-VPN1
• CC. port1
• DD. port2

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error ??Copy Failed?? for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit. There are two different ways to resolve this issue. Based on the exhibits, which methods could you use? (Choose two.)

Select 2 answers.

• AA. Update the management IP address of branch1_fgt.
• BB. Specify the gateway of the SD-WAN member port1 with an IP address or use the default value.
• CC. Do not define installation targets for SD-WAN members.
• DD. Review the per-device mapping configuration for metadata variables

Refer to the exhibits. The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate. The administrator increases the member priority on port2 to 20. Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

Select 2 answers.

• AA. FortiGate continues routing all existing sessions over port2.
• BB. FortiGate routes only new sessions over port2.
• CC. FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.
• DD. FortiGate flags the sessions as dirty.
• EE. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

Within the context of SD-WAN, what does SIA correspond to?

• AA. Remote Breakout
• BB. Local Breakout
• CC. Software Internet Access
• DD. Secure Internet Authorization

You want FortiGate to use SD-WAN rules to steer local-out traffic. Which two constraints should you consider? (Choose two.)

Select 2 answers.

• AA. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.
• BB. By default, local-out traffic does not use SD-WAN.
• CC. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.
• DD. You must configure each local-out feature individually to use SD-WAN.

(You plan a large SD-WAN deployment for a global company. You want to divide the network architecture into five geographical regions and install two hubs in each region for increased redundancy. You expect a significant amount of traffic within each region and limited traffic flow between spokes in different regions. You plan to connect the small branch sites to only the closest hub in their regions and the large branch sites to the two hubs in the regions. Which statement about your plan is true? Choose one answer.)

• AA. It is possible. You should use eBGP as the routing protocol between the regions.
• BB. It is not possible. FortiOS 7.6 supports multihub topologies with up to four hubs.
• CC. It is possible. You should use FortiManager and the overlay orchestrator multihub topology to simplify the deployment.
• DD. It is not possible. In a region, all spokes must have either single-hub or dual-hub connectivity.

Refer to the exhibit. The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading. Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

Select 2 answers.

• AA. By default, FortiGate offloads symmetric and asymmetric flows.
• BB. The original direction of the symmetric traffic flows from port3 to port2.
• CC. The reply direction of the asymmetric traffic flows from port2 to port3.
• DD. The auxiliary session can be offloaded to hardware.

Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly internet link. The FortiGate GUI page appears as shown in the exhibit. What should you do to set Facebook and LinkedIn as destinations?

• AA. Install a license to allow applications as destinations of SD-WAN rules.
• BB. In the Internet service field, select Facebook and LinkedIn.
• CC. Enable the applications as destinations of the SD-WAN rule feature visibility.
• DD. You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

Select 3 answers.

• AA. A template group can include a system template and an SD-WAN template.
• BB. Each template group can contain up to three IPsec tunnel templates.
• CC. CLI templates are applied in order, from top to bottom
• DD. A CLI template group can contain CLI templates of both types.
• EE. A CLI template can be of type CLI script or Perl script.