Online Access Free FCSS_SDW_AR-7.6 Exam Questions

(You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP.
Which are two recommended IPsec settings for this topology? Choose two answers.)

• A.On the hub, set the parameter mode-cfg to enable.
• B.On the spoke, set the parameter net-device to enable.
• C.On the spoke, configure the parameter localid.
• D.On the hub, set the tunnel type to static.

Which statement describes FortiGate behavior when you reference a zone in a static route?

• A.FortiGate routes the traffic through the best performing member of the zone.
• B.FortiGate ignores the static routes defined through members referenced in the zone.
• C.FoftiGate installs ECMP static routes for the first two members of the zone.
• D.FortiGate installs a static route for each member in the zone.

Refer to the exhibit.

Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?

• A.SD-WAN service rule 3 and interface HUB1-VPN3.
• B.SD-WAN service rule 4 and interface port2.
• C.SD-WAN service rule 4 and port1 or port2.
• D.SD-WAN service rule 3 and interface HUB1-VPN2.

Refer to the exhibits.



The first exhibit shows the SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template, and the second exhibit shows the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

• A.The diagnose output was collected on the device branch2_fgt.
• B.The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.
• C.The diagnose output was collected on the device branch1_fgt
• D.The diagnose output shows that HUB1-VPN1 and all HUBx-VPNy members are dead.

You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

• A.You can steer local-out traffic only with SD-WAN rules that use the manual strategy.
• B.You must configure each local-out feature individually to use SD-WAN.
• C.By default, local-out traffic does not use SD-WAN.
• D.By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.