FCSS - SD-WAN 7.6 Architect - FCSS_SDW_AR-7.6 Exam Practice Test

Question 1

The administrator uses the FortiManager SD-WAN overlay template to prepare an SD-WAN deployment. Using information provided through the SD-WAN overlay template wizard, FortiManager creates templates ready to install on the spoke and hub devices.
What are the three templates created by the SD-WAN overlay template for a spoke device? (Choose three.)

A. Static route template

B. CLI template

C. BGP template

D. IPsec tunnel template

E. Rules template

Correct Answer: C,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit that shows an SD-WAN zone configuration on the FortiManager GUI.

Based on the exhibit, how will the FortiGate device behave after it receives this configuration?

A. The configuration instructs FortiGate to establish shortcuts only when at least two members meet the SLA target.

B. The configuration instructs FortiGate to allow ADVPN shortcuts for the tunnels of this SD-WAN zone.

C. The configuration instructs FortiGate to choose an ADVPN shortcut based on SD-WAN information.

D. The configuration instructs FortiGate to establish shortcuts only for overlay interfaces that meet the SLA target HUB1_HC.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are two mandatory post-run tasks that must be performed? (Choose two.)

A. Assign a hub id metadata variable to each hub device.

B. Configure routing through the overlay tunnels created by the SD-WAN overlay template.

C. Configure SD-WAN rules

D. Create policy packages and assign them to the branch devices.

E. Assign an sdwan_id metadata variable to each device (branch and hub)

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits.

You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit.
Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit.
Which statement describes why FortiManager could not install the configuration on the branches?

A. You cannot install firewall policies that reference an SD-WAN member.

B. You cannot install SIA and DIA rules on the same device.

C. You cannot install firewall policies that reference an SD-WAN zone.

D. You must direct SIA traffic to a VPN tunnel.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)

A. Update the DHCP server configuration.

B. Define metadata variables value for each device.

C. Create a ZTP template.

D. Create model devices.

E. Create policy blueprint.

Correct Answer: C,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit.

The exhibit shows the health-check configuration on a FortiGate device used as a spoke. You notice that the hub FortiGate doesn't prioritize the traffic as expected.
Which two configuration elements should you check on the hub? (Choose two.)

A. The performance SLA uses the same criteria.

B. The performance SLA has the parameter priority-out-sla configured.

C. The performance SLA is configured with set embedded-measure accept.

D. This performance SLA uses the same members.

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading.
Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

A. The auxiliary session can be offloaded to hardware.

B. By default, FortiGate offloads symmetric and asymmetric flows.

C. The reply direction of the asymmetric traffic flows from port2 to port3.

D. The original direction of the symmetric traffic flows from port3 to port2.

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management and to share costly resources.
In which two situations will the MSSP install the hub in customer premises? (Choose two.)

A. The majority of the branch traffic is directed to a corporate data center.

B. The customer requires SIA with centralized breakout.

C. The administrator expects a large volume of traffic between the branches.

D. The customer expects a large amount of VoIP traffic.

Correct Answer: A,C

Question 9

Refer to the exhibit.

Which statement best describe the role of the ADVPN device in handling traffic?

A. This is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.

B. This is a spoke that has received a shortcut query from a remote hub.

C. This is a hub, and two spokes, 192.2.0.1 and 10.0.3.101, establish a shortcut.

D. This is a spoke that has received a direct shortcut query from a remote spoke.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

Refer to the exhibits.

The first exhibit shows the SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template, and the second exhibit shows the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

A. The diagnose output shows that HUB1-VPN1 and all HUBx-VPNy members are dead.

B. The diagnose output was collected on the device branch1_fgt

C. The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.

D. The diagnose output was collected on the device branch2_fgt.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet FCSS - SD-WAN 7.6 Architect - FCSS_SDW_AR-7.6 Exam Practice Test

Latest Update

Useful Links

Contact Us