Fortinet FCSS_SDW_AR-7.4 問題集

質問 1：
Refer to the exhibit that shows an SD-WAN zone configuration on the FortiManager GUI.

Based on the exhibit, how will the FortiGate device behave after it receives this configuration?
A. The configuration instructs FortiGate to allow ADVPN shortcuts for the tunnels of this SD-WAN zone.
B. The configuration instructs FortiGate to establish shortcuts only when at least two members meet the SLA target.
C. The configuration instructs FortiGate to choose an ADVPN shortcut based on SD-WAN information.
D. The configuration instructs FortiGate to establish shortcuts only for overlay interfaces that meet the SLA target HUB1_HC.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
A. A CLI template can be of type CLI script or Perl script.
B. CLI templates are applied in order, from top to bottom
C. A CLI template group can contain CLI templates of both types.
D. Each template group can contain up to three IPsec tunnel templates.
E. A template group can include a system template and an SD-WAN template.
正解：B,C,E
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Refer to the exhibits.

You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit.
Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit.
Which statement describes why FortiManager could not install the configuration on the branches?
A. You cannot install firewall policies that reference an SD-WAN zone.
B. You must direct SIA traffic to a VPN tunnel.
C. You cannot install SIA and DIA rules on the same device.
D. You cannot install firewall policies that reference an SD-WAN member.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD-WAN hub. Which overlay routing configuration should you use?
A. BGP per overlay with dynamic BGP for ADVPN shortcut routing.
B. BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.
C. BGP on loopback with dynamic BGP for ADVPN shortcut routing.
D. BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)
A. You must configure each local-out feature individually to use SD-WAN.
B. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.
C. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.
D. By default, local-out traffic does not use SD-WAN.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)
A. Update the DHCP server configuration.
B. Define metadata variables value for each device.
C. Create model devices.
D. Create a ZTP template.
E. Create policy blueprint.
正解：C,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibits.



The exhibits show an SD-WAN event log, the member status, and the SD-WAN rule configuration.
Which two conclusions can you draw from the information shown? (Choose two.)
A. Port2 has a lower latency than port1.
B. The administrator configured the service ID 1 with the highest priority member for port2.
C. FortiGate updated the outgoing interface list on the rule so it prefers port2.
D. The administrator configured the SD-WAN rule ID 1 with the default strategy mode.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)