View all questions & answers for the FCSS - SD-WAN 7.4 Architect Exam Materials exam

FCSS - SD-WAN 7.4 Architect Exam Materials - Question #17 Discussion

Comment Image Comment Image Comment Image
Question Diagram

An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule. Why? (Choose one answer)

  • A. You cannot use applications as the destination when FortiGate is used for a DIA setup.
  • B. You must enable the feature on the CLI.
  • C. You must enable the feature first using the GUI menu System > Feature Visibility.
  • D. FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
Correct Answer: C

Brave-Dump Community Votes

Answer: C (5 votes) 50%
Answer: B (5 votes) 50%

Community Explanations & Comments (10)

Brave-Dumps.com Admin 1 year ago
Selected: C
As per FCSS - SD-WAN 7.4 Architect Study Guide page: 213
Mbuh Mbuh 1 year ago
Selected: B
I think it is B. from Page 213 of study Guide.
The Application setting is always visible on the FortiManager menu. However, if you decide to configure SD-WAN rules directly from the FortiGate GUI, you need to enable GUI visibility for application with the CLI commands "set gui-app-detection-sdwan enable"
Brave-Dumps.com Admin 1 year ago
Selected: C
Dear Mbuh,
From FortiGate v7.2 and above versions we can enable application detection as criteria in SD-WAN rules in GUI and CLI

GUI:
go to System -> Feature Visibility and enable Application Detection Based SD-WAN.

CLI:
config system global
set gui-app-detection-sdwan enable
end

I think as long as the feature is available in the GUI, it should be considered the primary method. The CLI should only be used if it is not accessible through the GUI.
Jim Abshire 1 year ago
I agree with your assessment, however, if what you say is accurate the Study Guide should reflect the same, and it doesn't. It specifically states use CLI from Fortigate device. Any chance you can check with Fortinet directly so we can clear this up? I would like to get all questions correct.
007user 1 year ago
Selected: B
For the Fortigate, you need to enable GUI visibility for application detection with CLI commands. The question is clear when asks about Fortigate GUI, not about Fortimanager. Study guide p. 213. B is the correct answer.
Brave-Dumps.com Admin 1 year ago
The question doesn't mention FortiGate or FortiManager, but the image attached in the question is from a FortiGate device, so it should be C.
Jim Abshire 1 year ago
Yes it does, the question starts out with, see below, it says from the Fortigate GUI. "An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI"
Jim Abshire 1 year ago
Yes it does, the question starts out with, see below, it says from the Fortigate GUI. "An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI"
Elrasheed 1 year ago
Selected: C
C is correct I checked it in the FortiGate GUI
Raghdan Riyadh 1 year ago
Selected: C
To configure application categories as an SD-WAN rule destination in the GUI:
Note
This functionality is available in FortiOS 7.2.1 and later. Prior to 7.2.1, individual applications can be selected in SD-WAN rules by default.

After upgrading to 7.2.1 or later, the GUI functionality is available if applications are already configured in SD-WAN rules prior to upgrading. Otherwise, by default, individual applications and application groups cannot be selected in SD-WAN rules. To enable this functionality, see step 1 in the following procedure.

Enable the feature visibility:
Go to System > Feature Visibility.
In the Additional Features section, enable Application Detection Based SD-WAN.
Click Apply.


Note
To enable GUI visibility of application detection based SD-WAN in the CLI:
config system global
set gui-app-detection-sdwan enable
end
Raghdan Riyadh 1 year ago
Selected: C
I have a Fortigate running in production with the 7.4.7 version. I’ve already checked it.

NOTE: Some people may not find the feature there because they are in the root vdom. You need to be in the Global vdom.
Daniel 1 year ago
Selected: B
It`s B, page 213, ONLY VISIBLE AFTER CLI ACTIVATION
Jim Abshire 1 year ago
Selected: B
I'm picking B because the question is clear, using the Fortigate GUI, not Fortimanager, I realize running version 7.4, which is what I am running, you can choose the option in the GUI, however, the study guide specifically says using Fortigate, you must enable from the CLI.
Jim Abshire 1 year ago
BTW, I checked my configuration via CLI and the set gui-app-detection-sdwan is set to enable. I don't recall doing it.
Jim Abshire 1 year ago
BTW, I checked my configuration via CLI and the set gui-app-detection-sdwan is set to enable. I don't recall doing it. I changed it to disable and all it did was disable from the GUI, the option is still there and I just clicked to enable it.
Jim Abshire 1 year ago
Selected: B
I have to go with B on this one as the study guide is clear on it. However, it is confusing as I am running 7.4 and the option to enable via the GUI is available, not sure why this has to be so confusing.

FortiGate accepts the deletion and removes routes as required.