Fortinet FCSS_SDW_AR-7.6 Exam Questions

Question 6 of 36

Refer to the exhibit.

SD-WAN Network Topology -
Exam FCSS_SDW_AR-7.6: Question 6 - Image 1

You want to configure SD-WAN on a network, as shown in the exhibit.
The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender.
Which factors should you consider when planning your deployment?

You should build multiple SD-WAN topologies. Each topology should contain only one type of extension.

You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.

You should exclude the FortiGate devices with FortiLink connection from the SD-WAN topology.

You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with FortiExtender.

Correct Answer: D

Question 7 of 36

Refer to the exhibit.
Exam FCSS_SDW_AR-7.6: Question 7 - Image 1

You configure the SD-WAN rule ID 4 with two members (port1 and port2) and the strategy lowest cost (SLA).
Which two statements about the session shown in the exhibit are true? (Choose two.)

FortiGate steered this flow according to the application detected and the outgoing interface is port3.

FortiGate will reevaluate this session if the outgoing interface goes down.

FortiGate steered this flow according to the SD-WAN rule 4.

FortiGate will reevaluate this session if you update the routing table.

Correct Answer: B, C

Question 8 of 36

Refer to the exhibit.
FortiGate router policy and diagnose output
Exam FCSS_SDW_AR-7.6: Question 8 - Image 1

How does FortiGate handle the traffic with the source IP 10.0.1.130 and the destination IP 128.66.0.125?

FortiGate steers the traffic flow through port2.

FortiGate routes the traffic flow according to the FIB.

FortiGate load balances the traffic flow through port1 and port2.

FortiGate drops the traffic flow.

Correct Answer: D

Question 9 of 36

Refer to the exhibits.
SD-WAN template zones and rules configuration
Exam FCSS_SDW_AR-7.6: Question 9 - Image 1

FortiManager error message -
Exam FCSS_SDW_AR-7.6: Question 9 - Image 2

View install log in FortiManager
Exam FCSS_SDW_AR-7.6: Question 9 - Image 3

You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings, FortiManager prompts you with the error “Copy Failed” for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit.
Based on the exhibits, which statement best describes the issue and how you can resolve it?

Check the connection between branch1_fgt and FortiManager.

Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.

Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port1 without metadata variables.

Check the metadata variable definitions, and review the per-device mapping configuration.

Correct Answer: D

Question 10 of 36

Refer to the exhibits.
SD-WAN zone HUB1 and SD-WAN member configuration
Exam FCSS_SDW_AR-7.6: Question 10 - Image 1

SD-WAN zone HUB2 and SD-WAN member configuration
Exam FCSS_SDW_AR-7.6: Question 10 - Image 2

Output of command diagnose sys sdwan member
Exam FCSS_SDW_AR-7.6: Question 10 - Image 3

The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

The diagnose output was collected on the device branch1_fgt.

The diagnose output shows that HUB1-VPN1 and all HUBx-VPNy members are dead.

The diagnose output was collected on the device branch2_fgt.

The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.

Correct Answer: C