FCSS_SDW_AR-7.6問題集、Fortinet実際の試験問題

質問 1

(In which order does FortiGate consider the following elements during the route lookup process? Choose one answer.)

A. SD-WAN rules, ISDB routes, policy routes, BGP routes

B. SD-WAN rules, policy routes, static routes, ISDB routes

C. Policy routes, SD-WAN rules, Internet Service Database (ISDB) routes, BGP routes

D. Policy routes, ISDB routes, SD-WAN rules, static routes

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

(You are using the FortiManager SD-WAN monitor menus to check the status of an SD-WAN topology. When you place the mouse next to branch1_fgt, you receive the output shown in the exhibit.

Which two conclusions can you draw from the output shown in the exhibit? Choose two answers.)

A. The template Corp-SOT defines a dual-hub topology.

B. branch3_fgt is configured with three SD-WAN overlay tunnels and one is down.

C. branch1_fgt is configured with six SD-WAN overlay tunnels and three are down.

D. Three spokes have tunnels that are out of SLA.

正解: B,D

質問 3

Refer to the exhibit.

An SD-WAN zone configuration on the FortiGate GUI is shown.
What can you conclude about the zone and member configuration on this device? Choose one answer.)

A. You can add the member B-125 to the WAN3 zone and keep it as a member of the Test zone.

B. The WAN2 zone contains no member.

C. You can delete the WAN1 zone.

D. You can delete the virtual-wan-link zone.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?

A. You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.

B. You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with Forti Extender.

C. You must build multiple SD-WAN topologies. Each topology must contain only one type of extension.

D. You must use FortiManager to manage your SD-WAN topology.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Refer to the exhibits.

You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings. FortiManager prompts you with the error "Copy Failed" for the device branch1_fat When you click the log button. FortiManager displays the message shown in the exhibit.

A. Check the connection between branch1_fgt and FortiManager

B. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.

C. Check the metadata variable definitions, and review the per-device mapping configuration.

D. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port! without metadata variables.

E. Based on the exhibits, which statement best describes the issue and how you can resolve it?

正解: C

質問 6

Refer to the exhibits.

You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

A. port1

B. HUB1-VPN1

C. port2

D. port4

正解: C

質問 7

Refer to the exhibit that shows a diagnose output on FortiGate.

Based on the output shown in the exhibit, what can you say about the device role and how it handles health checks?

A. The device is a hub. It receives embedded health-check measures for each tunnel from the spoke.

B. The device is a spoke. It provides embedded health-check measures for each tunnel to the hub.

C. The device is a hub. It receives health-check measures for the tunnels of a spoke.

D. The device is a spoke. It receives health-check measures for the tunnels of another spoke.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 8

Exhibit.

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?

A. You can move HUB1-VPN3 from the HUB1 zone to the overlay-shops zone.

B. You can delete the virtual-wan-link zones.

C. The overlay-factories zone contains no member.

D. The underlay zone contains three members.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 9

(Refer to the exhibits.

The SD-WAN overlay template advanced settings and the underlay and network advertisement settings are shown. These are the configurations for the secondary hub of a dual-hub SD-WAN topology created with the FortiManager SD-WAN overlay orchestrator.
Which two conclusions can you draw from the information shown in the exhibits? Choose two answers.)

A. FortiManager will define port5 as a BGP neighbor.

B. FortiManager will create an overlay tunnel on the port1 interface.

C. FortiManager will create an overlay tunnel on the port2 interface.

D. FortiManager will define port2 as a BGP neighbor.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 10

(Refer to the exhibit.

The event log on a FortiGate device is shown.
Based on the output shown in the exhibit, what can you conclude about the tunnels on this device? (Choose one answer))

A. There is one shortcut tunnel built from the master tunnel VPN4.

B. The master tunnel HUB2-VPN3 cannot accept Auto-Discovery VPN (ADVPN) shortcuts.

C. The voice traffic is steered through the VPN tunnel HUB1-VPN3.

D. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

正解: D

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCSS - SD-WAN 7.6 Architect - FCSS_SDW_AR-7.6 模擬練習