FCSS_SDW_AR-7.4問題集、Fortinet実際の試験問題

質問 1

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD- WAN hub. Which overlay routing configuration should you use?

A. BGP per overlay with dynamic BGP for ADVPN shortcut routing.

B. BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

C. BGP on loopback with dynamic BGP for ADVPN shortcut routing.

D. BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Within the context of SD-WAN, what does SIA correspond to?

A. Local Breakout

B. Secure Internet Authorization

C. Remote Breakout

D. Software Internet Access

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. The administrator configured the SD-WAN rule ID 4 with two members (port1 and port2) and strategy lowest cost (SLA).
What are the two characteristics of the session shown in the exhibit? (Choose two.)

A. FortiGate will re-evaluate this session if the outgoing interface goes down.

B. FortiGate will never re-evaluate this session.

C. FortiGate steered this flow according to the application detected and the outgoing interface is port3.

D. FortiGate steered this flow according to an SD-WAN rule.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings. FortiManager prompts you with the error "Copy Failed" for the device branch1_fat When you click the log button. FortiManager displays the message shown in the exhibit.
Based on the exhibits, which statement best describes the issue and how you can resolve it?

A. Check the connection between branch1_fgt and FortiManager

B. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.

C. Check the metadata variable definitions, and review the per-device mapping configuration.

D. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port! without metadata variables.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

A. When all three members have the same packet loss

B. When HUB1-VPN3 has 4% packet loss

C. When HUB1-VPN1 has 12% packet loss

D. When HUB1-VPN1 has 4% packet loss

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

A. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to pingand traceroute.

B. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

C. By default, local-out traffic does not use SD-WAN.

D. You must configure each local-out feature individually to use SD-WAN.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit. The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit.
Based on the configuration, which three conclusions can you draw about the characteristics and requirements of the VPN tunnel? (Choose three.)

A. This configuration allows user-defined overlay IP addresses.

B. The remote end can be a third-party IPsec device.

C. The remote end must support IKEv2.

D. The tunnel interface IP address on the spoke side is provided by the hub.

E. The administrator must manually assign the tunnel interface IP address on the hub side

正解: B,C,E

解説: (PassTest メンバーにのみ表示されます)

質問 8

Refer to the exhibit. How does FortiGate handle the traffic with the source IP 10.0.1.130 and the destination IP 128.66.0 125?

A. FortiGate drops the traffic flow.

B. FortiGate load balances the traffic flow through port1 and port2.

C. FortiGate steers the traffic flow through port2.

D. FortiGate routes the traffic flow according to the FIB.

正解: A

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCSS - SD-WAN 7.4 Architect - FCSS_SDW_AR-7.4 模擬練習