Fortinet FCSS_SDW_AR-7.6 問題集

質問 1：
Refer to the exhibit.

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network.
The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over HUB1-VPN1. However, the traffic is routed over HUB1-VPN3.
Based on the output shown in the exhibit, which two reasons, individually or together, could explain the observed behavior? (Choose two.)
A. HUB1-VPN1 does not have a valid route to the destination
B. HUB1-VPN3 has a higher member configuration priority than HUB1-VPN1.
C. The traffic matches a regular policy route configured with HUB1-VPN3 as the outgoing device
D. HUB1-VPN3 has a lower route priority value (higher priority) than HUB1-VPN1.
正解：A,D

質問 2：
(In the context of SD-WAN, the terms underlay and overlay are commonly used to categorize links.
Which two statements about underlay and overlay links are correct? Choose two answers.)
A. FortiLink interface is considered an underlay link.
B. Wireless connections can be used to build overlay links.
C. Overlay links provide routing flexibility.
D. A VLAN is a type of overlay link.
E. Only wired connections can be used as underlay links.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Refer to exhibit.

Refer to the exhibit that shows event logs on FortiGate.
Based on the output shown in the exhibit, what can you say about the tunnels on this device?
A. The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.
B. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.
C. There is one shortcut tunnel built from master tunnel VPN4.
D. The device steers voice traffic through the VPN tunnel HUB1-VPN3.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit.

An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs.
Which two conclusions can you draw from the output shown? (Choose two.)
A. The template view should be used to see the hub devices.
B. branch2_fgt establishes six tunnels to the hubs and they are all up.
C. One member of branch2_fgt is missing the SLAs.
D. This SD-WAN topology contains only two branch devices.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit that shows a diagnose output on FortiGate.

Based on the output shown in the exhibit, what can you say about the device role and how it handles health checks?
A. The device is a hub. It receives health-check measures for the tunnels of a spoke.
B. The device is a spoke. It receives health-check measures for the tunnels of another spoke.
C. The device is a spoke. It provides embedded health-check measures for each tunnel to the hub.
D. The device is a hub. It receives embedded health-check measures for each tunnel from the spoke.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Exhibit.

Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2 Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)
A. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
B. On hubs, auto-diacovery-sender must be enabled on the IPsec VPNs to spokes
C. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.
D. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)