Fortinet FCSS_SDW_AR-7.4 問題集

質問 1：
You are planning a new SD-WAN deployment with the following criteria:
- Two regions
- Most of the traffic is expected to remain within its region
- No requirement for inter-region ADVPN
To remain within the recommended best practices, which routing protocol should you select for the overlays?
A. OSPF for the routing within each region and EBGP between the regions.
B. IBGP within each region and between the regions.
C. IBGP with BGP on loopback within each region and EBGP between the regions.
D. IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
A. A CLI template can be of type CLI script or Perl script.
B. A CLI template group can contain CLI templates of both types.
C. CLI templates are applied in order, from top to bottom.
D. Each template group can contain up to three IPsec tunnel templates.
E. A template group can include a system template and an SD-WAN template.
正解：B,C,E
解説: (Topexam メンバーにのみ表示されます)

質問 3：
The FortiGate devices are managed by ForliManager, and are configured for direct internet access (DIA). You confirm that DIA is working as expected for each branch, and check the SD- WAN zone configuration and firewall policies shown in the exhibits.



Then, you use the SD-WAN overlay template to configure the IPsec overlay tunnels. You create the associated SD-WAN rules to connect existing branches to the company hub device and apply the changes on the branches.
After those changes, users complain that they lost internet access. DIA is no longer working.
Based on the exhibit, which statement best describes the possible root cause of this issue?
A. The SD-WAN overlay template didn't configure a firewall policy to allow traffic through the overlay.
B. The SD-WAN overlay template defines a zone for each underlay interface and moves the interfaces into those zones.
C. The SD-WAN overlay template redefines the interface gateway addresses if they are defined with metadata variables.
D. The SD-WAN overlay template updates the SD-WAN template and the rules.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
As an MSSP administrator, you are asked to configure ADVPN on an existing SD-WAN topology.
FortiManager manages the customer devices in a dedicated ADOM. The previous administrator used the SD-WAN overlay topology.
Which two statements apply to this scenario? (Choose two.)
A. You can activate auto-discovery VPN in the SD-WAN overlay template for any type of topology, including a primary-primary dual-hub topology.
B. After you enable auto-discovery VPN in the overlay template, you must select between ADVPN
2.0 and ADVPN 1.0.
C. When auto-discovery VPN is enabled, FortiManager updates the IPsec and BGP templates in the hub.
D. You can activate auto-discovery VPN in the SD-WAN overlay template only if it is a single hub topology.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?

A. This is a spoke that has received a direct shortcut query from a remote spoke.
B. This is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.
C. This is a hub, and two spokes, 192.2.0.1and 10.0.3.101, establish a shortcut.
D. This is a spoke that has received a shortcut query from a remote hub.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?

A. SD-WAN service rule 4 and interface port2.
B. SD-WAN service rule 3 and interface HUB1-VPN2.
C. SD-WAN service rule 3 and interface HUB1-VPN3.
D. SD-WAN service rule 4 and port1 or port2.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4collected on a FortiGate device The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10 0.1.0/255.255.255.192 and with a destination of the social media application Facebook.
Based on the exhibits, which two statements are correct? (Choose two.)

A. When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1, HQ_T2, HQ_T3.
B. FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.
C. When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.
D. There is no service defined for the Facebook application, so FortiGate appliesservice rule 3 and directs the traffic to headquarters.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
What are three key routing principles of SD-WAN? (Choose three.)
A. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
B. Policy routes have precedence over SD-WAN rules.
C. SD-WAN members are skipped if they do not have a valid route to the destination.
D. Directly connected routes have precedence over SD-WAN rules.
E. SD-WAN rules are skipped if the best route to the destination is a static route
正解：A,B,C
解説: (Topexam メンバーにのみ表示されます)