View all questions & answers for the FCSS - SD-WAN 7.4 Architect Exam Materials exam

FCSS - SD-WAN 7.4 Architect Exam Materials - Question #61 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. The FortiGate devices are managed by FortiManager and initially configured for Direct Internet Access (DIA). After confirming DIA works, the administrator uses an SD-WAN overlay template to configure IPsec tunnels and SD-WAN rules to connect branches to a hub. After applying changes, users report that internet access no longer works. Which statement best describes the root cause? (Choose one answer)

  • A. The SD-WAN overlay template defines a zone for each underlay interface and moves the interfaces into those zones.
  • B. The SD-WAN overlay template didn’t configure a firewall policy to allow traffic through the overlay.
  • C. The SD-WAN overlay template redefines the interface gateway addresses if they are defined with metadata variables.
  • D. The SD-WAN overlay template updates the SD-WAN template and the rules.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (3 votes) 75%
Answer: C (1 vote) 25%

Community Explanations & Comments (4)

michael 1 year ago
Selected: C
DIA is broken due to gateway address redefine. Not 100% sure though.
Brave-Dumps.com Admin 1 year ago
Selected: A
Dear Michael, Thanks for your comment,
If you want to confirm whether the issue is truly related to the gateways (as suggested in option C), check the values of the variables like ${sdwan_port1_gw} in the FortiManager settings or directly on the device.
But without that confirmation, option A remains the most clear and straightforward explanation based on the information we have.
michael 1 year ago
Thanks Omar, u have done a good job overall. In option A, do you think when we move interfaces to zones, it will loose DIA access? underlay zone is shown in the firewall policy. if the ports have gateway DIA should work even after the zone creation. your thoughts are valuable to get a final decision.
Brave-Dumps.com Admin 1 year ago
Yes, DIA breaks not due to gateway issues, but because the firewall policy doesn’t match anymore after the zone change.
michael 1 year ago
Selected: A
Omar you are right. I changed my answer to A.
Brave-Dumps.com Admin 1 year ago
Good luck Michael, It was a pleasure discussing and exchanging knowledge with you. I wish you the best of luck on your exam! Once you've finished, I’d really appreciate it if you could leave some feedback on the website.
michael 1 year ago
thanks! sure thing Omar!
abbas dwiakt 1 year ago
Selected: A
A is correct