Online Access Free FCSS_SDW_AR-7.4 Exam Questions

Refer to the exhibit. The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading.
Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

• A.The auxiliary session can be offloaded to hardware.
• B.The original direction of the symmetric traffic flows from port3 to port2.
• C.By default, FortiGate offloads symmetric and asymmetric flows.
• D.The reply direction of the asymmetric traffic flows from port2 to port3.

Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

• A.On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
• B.On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
• C.On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
• D.On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.

Refer to the exhibit that shows a diagnose output on FortiGate.

Based on the output shown in the exhibit, what can you say about the device role and how it handles health checks?

• A.The device is a hub. It receives embedded health-check measures for each tunnel from the spoke.
• B.The device is a hub. It receives health-check measures for the tunnels of a spoke.
• C.The device is a spoke. It receives health-check measures for the tunnels of another spoke.
• D.The device is a spoke. It provides embedded health-check measures for each tunnel to the hub.

Refer to the exhibit. Which two conclusions can you draw from the output shown? (Choose two.)

• A.One SD-WAN rule allows traffic load balancing.
• B.One SD-WAN rule is defined with application categories as the destination.
• C.UDP traffic destined to the subnet 10.22.0.0/24 matches a policy route.
• D.UDP traffic destined to the subnet 10.22.0.0/24 matches a manual SD-WAN rule.

You have configured the performance SLA with the probe mode as Prefer Passive.
What are two observable impacts of this configuration? (Choose two.)

• A.After FortiGate switches to active mode, the SLA performance rule falls back to passive monitoring after 3 minutes.
• B.FortiGate passively monitors the member if ICMP traffic is passing through the member.
• C.FortiGate can offload the traffic that is subject to passive monitoring to hardware.
• D.FortiGate passively monitors the member if TCP traffic is passing through the member.
• E.During passive monitoring, the SLA performance rule cannot detect dead members.