FCSS - SD-WAN 7.4 Architect Exam Materials - Question #19 Discussion
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
176 Certification Products • 3429 Comments • 2479 Questions
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
Refer to the exhibit The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device. The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a dest...
Based on the output shown in the exhibit, what can you say about the tunnels on this device?
Match the FortiSIEM device type to its description. Select each FortiSIEM device type in the left column, hold and drag it to the blank space next to its corresponding description in the column on the right. Once you match a device type to its description, you can move it agai...
Refer to the exhibit. The daily report for application usage for internet traffic shows an unusually high number of unknown applications by category. What are two possible explanations for this?
Which two components are part of onboarding a secure web gateway (SWG) endpoint for secure internet access (SIA)?
Which two of the following can release the network lockdown on the endpoint applied by FortiSASE?
When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components?
What is required to enable the MSSP feature on FortiSASE?
You are configuring SD-WAN to load balance network traffic and you want to take into account the link quality. Which two facts should you consider?
You want FortiGate to steer all DNS traffic either going through FortiGate or initiated by FortiGate—according to SD-WAN rules. Which two constraints should you consider?
Refer to the exhibits. The SD-WAN zones and members configuration of two branch devices are shown. The two branch devices are part of the same hub-and-spoke topology and connect to the same hub. The devices are configured to allow auto-discovery VPN (ADVPN). The configur...
Which two features must you configure before FortiGate can steer traffic according to SD-WAN rules?
You want to configure two static routes. One that references a zone and the second one that references an SD-WAN member that belongs to that zone. Which statement about this scenario is true?
Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device. The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a des...
Refer to the exhibits. Two SD-WAN event logs, the member status, the SD-WAN rule configuration, and the health-check configuration for a FortiGate device are shown. Immediately after the log messages are displayed, how will the FortiGate steer the traffic based on the infor...
Which two additional features does FortiClient integration provide with FortiSASE, when compared to secure web gateway (SWG) deployment?
Which service is included in a secure access service edge (SASE) solution, but not in a security service edge (SSE) solution?
Which secure internet access (SIA) use case minimizes individual endpoint configuration?
You plan a large SD-WAN deployment for a global company. You want to divide the network architecture into five geographical regions and install two hubs in each region for increased redundancy. You expect a significant amount of traffic within each region and limited traffic f...