FCSS_SDW_AR-7.6 Exam - Free Fortinet Questions and Answers

Question #11 (Topic: Exam A)

Refer to the exhibits.
SD-WAN template zones and rules configuration

FortiManager error message

View install log in FortiManager

You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings, FortiManager prompts you with the error “Copy Failed” for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit.
Based on the exhibits, which statement best describes the issue and how you can resolve it?

A. Check the connection between branch1_fgt and FortiManager. B. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets. C. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port1 without metadata variables. D. Check the metadata variable definitions, and review the per-device mapping configuration.

Answer: D

Question #12 (Topic: Exam A)

Refer to the exhibits.
SD-WAN zone HUB1 and SD-WAN member configuration

SD-WAN zone HUB2 and SD-WAN member configuration

Output of command diagnose sys sdwan member

The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

A. The diagnose output was collected on the device branch1_fgt. B. The diagnose output shows that HUB1-VPN1 and all HUBx-VPNy members are dead. C. The diagnose output was collected on the device branch2_fgt. D. The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.

Answer: C

Question #13 (Topic: Exam A)

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.
What happens if you delete the SD-WAN member from the FortiGate GUI?

A. FortiGate accepts the deletion and places the member in the default SD-WAN zone. B. FortiGate displays an error message. SD-WAN zones must contain at least two members. C. FortiGate accepts the deletion and removes static routes as required. D. FortiGate accepts the SD-WAN member deletion with no further action.

Answer: D

Question #14 (Topic: Exam A)

Refer to the exhibit.

Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for spoke A1 to establish an auto-discovery VPN (ADVPN) shortcut with spoke B2? (Choose two.)

A. On the hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes. B. On the hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs. C. On the spokes, auto-discovery-receiver must be enabled on the IPsec VPNs to the hub. D. On the spokes, auto-discovery-sender must be enabled on the IPsec VPNs to hubs.

Answer: BD

Question #15 (Topic: Exam A)

Refer to the exhibits.
Ping result

Diagnose output

You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?

A. port2 B. port1 C. port4 D. HUB1-VPN1

Answer: B

Fortinet FCSS_SDW_AR-7.6 - FCSS - SD-WAN 7.6 Architect Exam