FCSS - SD-WAN 7.4 Architect

Here you have the best Fortinet FCSS_SDW_AR-7.4 practice exam questions

You have 53 total questions to study from
Each page has 5 questions, making a total of 11 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 27, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 53

Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

The session information output displays no SD-WAN service id.

Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

FortiGate flags the session with may_dirty and vwl_default.

Traffic does not match any of the entries in the policy route table.

The traffic is distributed, regardless of weight, through all available static routes.

Correct Answer: A, D

Question 2 of 53

Refer to the exhibit.
Exam FCSS_SDW_AR-7.4: Question 2 - Image 1

Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub1 and Hub2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.

On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.

On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.

Correct Answer: A, B

Question 3 of 53

Refer to the exhibit.
Exam FCSS_SDW_AR-7.4: Question 3 - Image 1

The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device
The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10 0.1.0/255.255.255.192 and with a destination of the social media application Facebook.
Based on the exhibits, which two statements are correct? (Choose two.)

FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.

When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1, HQ_T2, HQ_T3.

There is no service defined for the Facebook application, so FortiGate appliesservice rule 3 and directs the traffic to headquarters.

When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.

Correct Answer: A, B

Question 4 of 53

Refer to the exhibit.
Exam FCSS_SDW_AR-7.4: Question 4 - Image 1

The administrator used the SD-WAN overlay template to prepare an IPsec tunnels configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the FortiManager installation preview for one FortiGate device.
Based on the exhibit, which statement best describes the configuration applied to the FortiGate device?

It is a spoke device that establishes dynamic IPsec tunnels to the hub. The local subnet range is 10.10 128.0/23.

It is a hub device. It can send ADVPN shortcut offers.

It is a hub device. It will automatically discover the spoke devices and add them to the SD-WAN topology.

It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send ADVPN shortcut requests.

Correct Answer: B

Question 5 of 53

You are planning a new SD-WAN deployment with the following criteria:

Two regions -
Most of the traffic is expected to remain within its region
No requirement for inter-region ADVPN
To remain within the recommended best practices, which routing protocol should you select for the overlays?

IBGP with BGP on loopback within each region and EBGP between the regions.

OSPF for the routing within each region and EBGP between the regions.

IBGP within each region and between the regions.

IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.

Correct Answer: A