Free FCSS_SDW_AR-7.4 Sample Questions — FCSS - SD-WAN 7.4 Architect

Within the context of SD-WAN, what does SIA correspond to?

• A. Remote Breakout
• B. Software Internet Access
• C. Secure Internet Authorization
• D. Local Breakout

Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

• A. The session information output displays no SD-WAN service id
• B. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting
• C. FortiGate flags the session with may_dirty and vwl_default
• D. Traffic does not match any of the entries in the policy route table
• E. The traffic is distributed, regardless of weight, through all available static routes

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are two mandatory post-un tasks that must be performed? (Choose two.)

• A. Create policy packages and assign them to the branch devices
• B. Configure SD-WAN rules
• C. Configure routing through the overlay tunnels created by the SD-WAN overlay template
• D. Assign an sdwan_id metadata variable to each device (branch and hub)
• E. Assign a hub_id metadata variable to each hub device

As an IT manager for a healthcare company, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP). Each site must maintain direct internet access and ensure that it is secure. You expected significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP. Which two MSSP deployment blueprints best address the customer’s requirements? (Choose two.)

• A. Use a shared hub at the MSSP premises with a dedicated VDOM for the new customer, and install the spokes at the customer premises
• B. Use a shared hub at the MSSP premises and a dedicated hub at the customer premises and install the spokes at the customer premises
• C. Install a dedicated hub at the MSSP premises for the new customer, and install the spokes at the customer premises
• D. Install the hub and spokes at the customer premises and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule. What could be a possible cause of the traffic interruption?

• A. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members
• B. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN
• C. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration
• D. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration