Online Access Free FCSS_SDW_AR-7.6 Exam Questions

Refer to the exhibit.

Which statement best describe the role of the ADVPN device in handling traffic?

• A.This is a spoke. The kernel received a shortcut request and forwards the query to another spoke.
• B.This is a hub in a dual-region topology. The remote hub tunnel ID is 10.0.2.101.
• C.This is a spoke that has received a shortcut query from another spoke and has forwarded the response to its hub.
• D.This is a hub that has received a query from a spoke and has forwarded it to another spoke.

Refer to the exhibit.

How does FortiGate handle the traffic with the source IP 10.0.1.130 and the destination IP 128.66.0 125?

• A.FortiGate load balances the traffic flow through port7 and port8.
• B.FortiGate drops the traffic flow.
• C.FortiGate routes the traffic flow according to the forwarding information base (FIB).
• D.FortiGate steers the traffic flow through port7.

(Refer to the exhibit.

You update the spokes configuration of an existing auto-discovery VPN (ADVPN) topology by adding the parameters shown in the exhibit.
Which is a valid objective of those settings? Choose one answer.)

• A.Prevent multiple shortcuts from being established over the same overlay.
• B.Enable the tunnels as overlay links.
• C.Convert the configuration from ADVPN to ADVPN 2.0.
• D.Prevent cross-overlay shortcuts.

Refer to the exhibits.

The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate.
The administrator increases the member priority on port2 to 20.
Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

• A.FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.
• B.FortiGate continues routing all existing sessions over port2.
• C.FortiGate routes only new sessions over port2.
• D.FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.
• E.FortiGate flags the sessions as dirty.

The FortiGate devices are managed by ForliManager, and are configured for direct internet access (DIA). You confirm that DIA is working as expected for each branch, and check the SD-WAN zone configuration and firewall policies shown in the exhibits.



Then, you use the SD-WAN overlay template to configure the IPsec overlay tunnels. You create the associated SD-WAN rules to connect existing branches to the company hub device and apply the changes on the branches.
After those changes, users complain that they lost internet access. DIA is no longer working.
Based on the exhibit, which statement best describes the possible root cause of this issue?

• A.The SD-WAN overlay template updates the SD-WAN template and the rules.
• B.The SD-WAN overlay template redefines the interface gateway addresses if they are defined with metadata variables.
• C.The SD-WAN overlay template didn't configure a firewall policy to allow traffic through the overlay.
• D.The SD-WAN overlay template defines a zone for each underlay interface and moves the interfaces into those zones.