Question 1

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit. The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1. Which two reasons explain why some log messages show that the traffic matched the implicit SDWAN rule? (Choose two.)

Options :

A : Full SSL inspection is not enabled on the matching firewall policy.

B : The session 3-tuple did not match any of the existing entries in the ISDB application cache.

C :

FortiGate could not refresh the routing information on the session after the application was detected.

D :

No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting

Answer: B,C

Question 2

Refer to the exhibit.

Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?

Options :

A : The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.

B : The device steers voice traffic through the VPN tunnel HUB1-VPN3.

C : The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

D : There is one shortcut tunnel built from master tunnel VPN4.

Answer: B

Question 3

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD-WAN hub. Which overlay routing configuration should you use?

Options :

A : BGP on loopback with dynamic BGP for ADVPN shortcut routing.

B : BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

C : BGP per overlay with dynamic BGP for ADVPN shortcut routing.

D : BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

Answer: A

Confidently Practice Online with Free FCSS_SDW_AR-7.4 Exam Cram

Buying Options: