FCSS_SDW_AR-7.6試験無料問題集（96題）「Fortinet FCSS

出題：1

(Refer to the exhibits.

The SD-WAN zones and members configuration of two branch devices are shown. The two branch devices are part of the same hub-and-spoke topology and connect to the same hub. The devices are configured to allow Auto-Discovery VPN (ADVPN). The configuration on the hub allows the initial communication between the two spokes.
When traffic flows require it, between which interfaces can the devices establish shortcuts? Choose one answer.)

A. Between T3 on Branch-A and TC on Branch-B

B. Interface connected to HUB only

C. Between T2 on Branch-A and TA on Branch-B

D. Any interface in the overlay zones

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibits.

The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configuration and the underlay zone status.
Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choose two.)

A. The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.

B. Encrypted traffic is not used for the performance measurement.

C. FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.

D. Only related TCP traffic is used for performance measurement.

正解：A,C 解答を投票する

出題：3

The FortiGate devices are managed by ForliManager, and are configured for direct internet access (DIA). You confirm that DIA is working as expected for each branch, and check the SD-WAN zone configuration and firewall policies shown in the exhibits.

Then, you use the SD-WAN overlay template to configure the IPsec overlay tunnels. You create the associated SD-WAN rules to connect existing branches to the company hub device and apply the changes on the branches.
After those changes, users complain that they lost internet access. DIA is no longer working.
Based on the exhibit, which statement best describes the possible root cause of this issue?

A. The SD-WAN overlay template redefines the interface gateway addresses if they are defined with metadata variables.

B. The SD-WAN overlay template didn't configure a firewall policy to allow traffic through the overlay.

C. The SD-WAN overlay template updates the SD-WAN template and the rules.

D. The SD-WAN overlay template defines a zone for each underlay interface and moves the interfaces into those zones.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit, which shows the SD-WAN rule status and configuration.

Based on the exhibit, which change in the measured latency will first make HUB1-VPN3 the new preferred member?

A. When HUB1-VPN3 has a lower latency than HUB1-VPN1 and HUB1-VPN2

B. When HUB1-VPN3 has a latency of 80 ms

C. When HUB1-VPN3 has a latency of 90 ms

D. When HUB1-VPN1 has a latency of 200 ms

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

(In the context of SD-WAN, the terms underlay and overlay are commonly used to categorize links.
Which two statements about underlay and overlay links are correct? Choose two answers.)

A. Wireless connections can be used to build overlay links.

B. A VLAN is a type of overlay link.

C. FortiLink interface is considered an underlay link.

D. Overlay links provide routing flexibility.

E. Only wired connections can be used as underlay links.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule.
What could be a possible cause of the traffic interruption?

A. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration.

B. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members.

C. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration.

D. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

As an IT manager for a healthcare company, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP). Each site must maintain direct internet access and ensure that it is secure. You expected significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP.
Which two MSSP deployment blueprints best address the customer's requirements? (Choose two.)

A. Use a shared hub at the MSSP premises and a dedicated hub at the customer premises and install the spokes at the customer premises.

B. Install the hub and spokes at the customer premises and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM.

C. Install a dedicated hub at the MSSP premises for the new customer, and install the spokes at the customer premises.

D. Use a shared hub at the MSSP premises with a dedicated VDOM for the new customer, and install the spokes at the customer premises.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Refer to the exhibits.

The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate.
The administrator increases the member priority on port2 to 20.
Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

A. FortiGate continues routing all existing sessions over port2.

B. FortiGate routes only new sessions over port2.

C. FortiGate flags the sessions as dirty.

D. FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.

E. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

正解：C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)

A. Create policy blueprint.

B. Define metadata variables value for each device.

C. Update the DHCP server configuration.

D. Create model devices.

E. Create a ZTP template.

正解：A,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

(You are using the FortiManager SD-WAN monitor menus to check the status of an SD-WAN topology. When you place the mouse next to branch1_fgt, you receive the output shown in the exhibit.

Which two conclusions can you draw from the output shown in the exhibit? Choose two answers.)

A. branch1_fgt is configured with six SD-WAN overlay tunnels and three are down.

B. The template Corp-SOT defines a dual-hub topology.

C. Three spokes have tunnels that are out of SLA.

D. branch3_fgt is configured with three SD-WAN overlay tunnels and one is down.

正解：C,D 解答を投票する

FCSS_SDW_AR-7.6試験無料問題集「Fortinet FCSS - SD-WAN 7.6 Architect 認定」