FCSS_SDW_AR-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit.

You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly internet link. The FortiGate GUI page appears as shown in the exhibit.
What should you do to set Facebook and LinkedIn as destinations?

• A.In the Internet service field, select Facebook and LinkedIn.
• B.Install a license to allow applications as destinations of SD-WAN rules.
• C.Enable the applications as destinations of the SD-WAN rule feature visibility.
• D.You cannot configure applications as destinations of an SD-WAN rule on a standalone FortiGate device.

(Refer to the exhibit. The administrator configured two SD-WAN rules to load balance the traffic.

Which interfaces does FortiGate use to steer the traffic from 10.0.1.124 to 10.0.0.254? Choose one answer.)

• A.Any interface in the HUB1 or HUB2 zones
• B.HUB2-VPN2
• C.HUB1-VPN2 or HUB2-VPN2
• D.port1 or port2

Which statement describes FortiGate behavior when you reference a zone in a static route?

• A.FortiGate ignores the static routes defined through members referenced in the zone.
• B.FoftiGate installs ECMP static routes for the first two members of the zone.
• C.FortiGate installs a static route for each member in the zone.
• D.FortiGate routes the traffic through the best performing member of the zone.

You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

• A.By default, local-out traffic does not use SD-WAN.
• B.By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.
• C.You can steer local-out traffic only with SD-WAN rules that use the manual strategy.
• D.You must configure each local-out feature individually to use SD-WAN.

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

• A.FortiGate could not refresh the routing information on the session after the application was detected.
• B.The session 3-tuple did not match any of the existing entries in the ISDB application cache.
• C.No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting
• D.Full SSL inspection is not enabled on the matching firewall policy.