Online Access Free FCSS_SDW_AR-7.4 Exam Questions

Refer to the exhibit.

An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule Why?

• A.You cannot use applications as the destination when FortiGate is used for a DIA setup.
• B.FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
• C.You must enable the feature first using the GUI menu System > Feature Visibility.
• D.You must enable the feature on the CLI.

Refer to the exhibit.

The administrator configured the SD-WAN rule ID 4 with two members (port1 and port2) and strategy lowest cost (SLA).
What are the two characteristics of the session shown in the exhibit? (Choose two.)

• A.FortiGate steered this flow according to an SD-WAN rule.
• B.FortiGate steered this flow according to the application detected and the outgoing interface is port3.
• C.FortiGate will re-evaluate this session if the outgoing interface goes down.
• D.FortiGate will never re-evaluate this session.

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.
What happens if you delete the SD-WAN member from the FortiGate GUI?

• A.FodiGate accepts the deletion and removes routes as required.
• B.FortiGate accepts the deletion and places the member in the default SD-WAN zone.
• C.FortiGate displays an error message. SD-WAN zones must contain at least two members
• D.FortiGate displays an error message. You must use the CLI to delete an SD-WAN member.

Refer to the exhibits.

The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate.
The administrator increases the member priority on port2 to 20.
Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

• A.FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.
• B.FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.
• C.FortiGate flags the sessions as dirty.
• D.FortiGate routes only new sessions over port2.
• E.FortiGate continues routing all existing sessions over port2.

Refer to the exhibits.

The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown.
Which statement best describes the cause of the issue?

• A.You can assign only one IPsec template to each FortiGate device.
• B.You should review the branch1_fgt configuration for configured tunnels in the rootVDOM.
• C.You should use the same outgoing interface of both templates.
• D.You can assign only one template with a tunnel type of static to each FortiGate device.