Question 1

(Refer to the exhibit. You noticed that one SD-WAN member went down and you immediately collected thesession output shown in the exhibit. What can you conclude from this output? Choose one answer.)

Options :

A : FortiGate didn’t receive any traffic related to this session after the interface went down.

B : FortiGate flushed the gateway for the session.

C : FortiGate cannot reevaluate the session.

D : FortiGate already reevaluated this session.

Answer: D

Question 2

Refer to the exhibit that shows an SD-WAN zone configuration on the FortiManager GUI.Based on the exhibit, how will the FortiGate device behave after it receives this configuration?

Options :

A : The configuration instructs FortiGate to choose an ADVPN shortcut based on SD-WAN information.

B : The configuration instructs FortiGate to allow ADVPN shortcuts for the tunnels of this SD-WAN zone.

C : The configuration instructs FortiGate to establish shortcuts only when at least two members meet theSLA target.

D : The configuration instructs FortiGate to establish shortcuts only for overlay interfaces that meet theSLA target HUB1_HC.

Answer: C

Question 3

Refer to the exhibits.An administrator is testing application steering in SD-WAN. Before generating test traffic, the administratorcollected the information shown in the first exhibit. After generating GoToMeeting test traffic, theadministrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic tomatch rule ID 1.Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule?(Choose two.)

Options :

A : Full SSL inspection is not enabled on the matching firewall policy.

B : The session 3-tuple did not match any of the existing entries in the ISDB application cache.

C : FortiGate could not refresh the routing information on the session after the application was detected.

D : No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting

Answer: B,D

Question 4

Refer to the exhibits.The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs ofFacebook and YouTube along with the firewall policy configuration and the underlay zone status.Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choosetwo.)

Options :

A : Only related TCP traffic is used for performance measurement.

B : The performance is an average of the metrics measured for Facebook and YouTube traffic passingthrough the member.

C : Encrypted traffic is not used for the performance measurement.

D : FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passingthrough the member.

Answer: B,D

Question 5

(In the context of SD-WAN, the terms underlay and overlay are commonly used to categorize links.Which two statements about underlay and overlay links are correct? Choose two answers.)

Options :

A : A VLAN is a type of overlay link.

B : Overlay links provide routing flexibility.

C : FortiLink interface is considered an underlay link.

D : Wireless connections can be used to build overlay links.

E : Only wired connections can be used as underlay links.

Answer: B,D

Confidently Practice Online with Free FCSS_SDW_AR-7.6 Exam Cram

Buying Options: