View all questions & answers for the FCSS - SD-WAN 7.4 Architect Exam Materials exam

FCSS - SD-WAN 7.4 Architect Exam Materials - Question #19 Discussion

Comment Image Comment Image Comment Image

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario? (Choose one answer)

  • A. Update the SD-WAN configuration on the branches.
  • B. Update the IPsec tunnel configuration on the branches.
  • C. Update the IPsec tunnel configurations on the hub.
  • D. Delete the existing ADVPN configuration and configure ADVPN 2.0.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (8 votes) 80%
Answer: C (2 votes) 20%

Community Explanations & Comments (10)

007user 1 year ago
Selected: C
ADVPN 2.0 is enabled on the hub. Spokes adapt automatically. No need to reconfigure branches.
michael 1 year ago
Selected: A
According to p 380. no changes required in HUB.
Jonathan 1 year ago
Selected: C
Hello Omar

Have somebody been able to validate this question ? From My pov i believe ADVPN is most importantly configured on the HUB so that spokes can dynamically learn and establish tunnels
Brave-Dumps.com Admin 1 year ago
Hi Jonathan, i added a new comment, please check it.
Brave-Dumps.com Admin 1 year ago
Selected: A
As per Fortinet, the only source to prepare for this exam is the study guide, as per study guide page 380:

First, within the IPsec phase1 configuration, you enable the parameter auto-discovery-receiver on the spokes, and the parameters auto-discovery-sender and auto-discovery-forwarder on the hub...
Then, in the SD-WAN section, you enable ADVPN 2.0 by enabling advpn-select at the SD-WAN zone level.

you can download the guides and books from: https://brave-dumps.com/study-and-lab-guides
Tony 1 year ago
Selected: A
p380 shows "SD-WAN" portion is made on every spoke, not hub.
Michael 1 year ago
Selected: A
https://docs.fortinet.com/document/fortigate/7.4.2/administration-guide/196824/sd-wan-cli-configuration
Jim Abshire 1 year ago
Selected: A
From page 380
"The hub configuration remains similar. You don't need to configure specific parameters to use ADVPN 2.0"
Mohamed 11 months ago
Selected: A
Given answer is incorrect. The answer is D. From SD-WAN 7.4 Architect, page 382: "To adjust the configuration for ADVPN 2.0: - Edit the SD-WAN template... - IPsec templates: No changes required..." Therefore, the configuration changes occur with the SD-WAN configuration and not the IPsec configuration.
Mohamed 11 months ago
Selected: A
Given answer is incorrect. The answer is D. From SD-WAN 7.4 Architect, page 382: "To adjust the configuration for ADVPN 2.0: - Edit the SD-WAN template... - IPsec templates: No changes required..." Therefore, the configuration changes occur with the SD-WAN configuration and not the IPsec configuration.
Mohamed 11 months ago
Selected: A
Given answer is incorrect. The answer is D. From SD-WAN 7.4 Architect, page 382: "To adjust the configuration for ADVPN 2.0: - Edit the SD-WAN template... - IPsec templates: No changes required..." Therefore, the configuration changes occur with the SD-WAN configuration and not the IPsec configuration.