FCSS_SDW_AR-7.4 試験問題を無料オンラインアクセス

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD- WAN hub. Which overlay routing configuration should you use?

• A.BGP on loopback with dynamic BGP for ADVPN shortcut routing.
• B.BGP per overlay with dynamic BGP for ADVPN shortcut routing.
• C.BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.
• D.BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule Why?

• A.FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
• B.You must enable the feature on the CLI.
• C.You must enable the feature first using the GUI menu System > Feature Visibility.
• D.You cannot use applications as the destination when FortiGate is used for a DIA setup.

Refer to the exhibits, which show the configuration of an SD-WAN rule and the corresponding rule status and routing table.


The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

• A.The traffic will be routed over HUB1-VPN1.
• B.The traffic will be routed over HUB1-VPN3.
• C.The traffic will be load balanced across all three overlays
• D.The traffic will be routed over HUB1-VPN2

Within the context of SD-WAN, what does SIA correspond to?

• A.Local Breakout
• B.Software Internet Access
• C.Secure Internet Authorization
• D.Remote Breakout

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

• A.port1
• B.port2
• C.HUB1-VPN1
• D.port4