FCSS - SD-WAN 7.6 Architect

Here you have the best Fortinet FCSS_SDW_AR-7.6 practice exam questions

You have 36 total questions to study from
Each page has 5 questions, making a total of 8 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 14, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 36

Refer to the exhibit.

FortiManager SD-WAN monitor -
Exam FCSS_SDW_AR-7.6: Question 1 - Image 1

To check the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus, you place your mouse next to branch1_fgt and receive the output shown in the exhibit.
Which conclusion can you draw from the output shown in the exhibit?

Three tunnels of branch2_fgt are out of SLA.

The template Corp-SOT defines a single-hub topology.

branch3_fgt is configured with three SD-WAN overlay tunnels and one is dead.

The three spokes have tunnels that are out of SLA.

Correct Answer: D

Question 2 of 36

Refer to the exhibit, which shows the SD-WAN rule status and configuration.
SD-WAN rules status and configuration
Exam FCSS_SDW_AR-7.6: Question 2 - Image 1

Exam FCSS_SDW_AR-7.6: Question 2 - Image 1

Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

When all three members have the same packet loss

When HUB1-VPN3 has 4% packet loss

When HUB1-VPN1 has 12% packet loss

When HUB1-VPN1 has 4% packet loss

Correct Answer: C

Question 3 of 36

Refer to the exhibits.

Global System configuration -
Exam FCSS_SDW_AR-7.6: Question 3 - Image 1

Interface port2 configuration -
Exam FCSS_SDW_AR-7.6: Question 3 - Image 2

Routing Table on FortiGate -
Exam FCSS_SDW_AR-7.6: Question 3 - Image 3

The administrator increases the member priority on port2 to 20.
Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

FortiGate continues routing all existing sessions over port2.

FortiGate routes only new sessions over port2.

FortiGate flags the sessions as dirty.

FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.

Correct Answer: C, D

Question 4 of 36

You are configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN.
What should you do to implement ADVPN 2.0 in this scenario?

Update the IPsec tunnel configuration on the branches.

Delete the existing ADVPN configuration and configure ADVPN 2.0.

Update the IPsec tunnel configurations on the hub.

Update the SD-WAN configuration on the branches.

Correct Answer: C

Question 5 of 36

As an IT manager, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP).
Each site must maintain direct internet access and be secure. You expect significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP.
Which two MSSP deployment blueprints address your requirements? (Choose two.)

Install the hub and spokes on the customer premises, and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM.

Use a shared hub on the MSSP premises and a dedicated hub on the customer premises, and install the spokes on the customer premises.

Install a dedicated hub on the MSSP premises for the customer, and install the spokes on the customer premises.

Use a shared hub on the MSSP premises with a dedicated VDOM for the customer, and install the spokes on the customer premises.

Correct Answer: C, D