FCSS - SD-WAN 7.4 Architect (FCSS_SDW_AR-7.4) Free Practice Test

Question 1

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

A. A template group can include a system template and an SD-WAN template.

B. A CLI template group can contain CLI templates of both types.

C. Each template group can contain up to three IPsec tunnel templates.

D. A CLI template can be of type CLI script or Perl script.

E. CLI templates are applied in order, from top to bottom.

Correct Answer: A,B,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

A. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

B. You must configure each local-out feature individually to use SD-WAN.

C. By default, local-out traffic does not use SD-WAN.

D. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to pingand traceroute.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

A. When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

B. When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.

C. SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

D. SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.

E. Member metrics are measured only if a rule uses the SLA target.

Correct Answer: B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?

A. The device steers voice traffic through the VPN tunnel HUB1-VPN3.

B. There is one shortcut tunnel built from master tunnel VPN4.

C. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

D. The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly internet link. The FortiGate GUI page appears as shown in the exhibit.
What should you do to set Facebook and LinkedIn as destinations?

A. Install a license to allow applications as destinations of SD-WAN rules.

B. In the Internet service field, select Facebook and LinkedIn.

C. Enable the applications as destinations of the SD-WAN rule feature visibility.

D. You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits. You use FortiManager to manage the branch devices and configure the SD- WAN template. You have configured direct internet access (DIA) for the IT department users.
Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit.
Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit. Which statement describes why FortiManager could not install the configuration on the branches?

A. You cannot install firewall policies that reference an SD-WAN zone.

B. You must direct SIA traffic to a VPN tunnel.

C. You cannot install firewall policies that reference an SD-WAN member.

D. You cannot install SIA and DIA rules on the same device.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading.
Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

A. The auxiliary session can be offloaded to hardware.

B. By default, FortiGate offloads symmetric and asymmetric flows.

C. The reply direction of the asymmetric traffic flows from port2 to port3.

D. The original direction of the symmetric traffic flows from port3 to port2.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

You are planning a new SD-WAN deployment with the following criteria:
- Two regions
- Most of the traffic is expected to remain within its region
- No requirement for inter-region ADVPN
To remain within the recommended best practices, which routing protocol should you select for the overlays?

A. IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.

B. IBGP within each region and between the regions.

C. IBGP with BGP on loopback within each region and EBGP between the regions.

D. OSPF for the routing within each region and EBGP between the regions.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - SD-WAN 7.4 Architect (FCSS_SDW_AR-7.4) Free Practice Test