SD-WAN interacts with many other FortiGate features. Some of them are required to allow SD-WAN to steer the traffic.Which three configuration elements that you must configure before FortiGate can steer traffic according to SD-WAN rules? (Choose three.)
Answer(s): A,B,E
Before FortiGate can steer traffic according to SD-WAN rules, certain configuration elements must be present. The guide states:"SD-WAN is not a standalone feature and interacts with several fundamental FortiGate configurations. Specifically, you must: (1) Define the interfaces (physical, VLAN, or IPsec) that will act as SD-WAN members, (2) Create firewall policies to allow traffic to be steered by SD-WAN, and (3) Set up routing so that traffic has valid routes via SD-WAN members. Without these, SD-WAN rules will not be able to match or steer any traffic."Security profiles and traffic shaping are not mandatory for basic SD-WAN steering but can be layered on for enhanced security and QoS once foundational elements are present.
FortiOS 7.4 SD-WAN Concept Guide, "Prerequisite Configuration Elements for SD-WAN Steering
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
Answer(s): A,C,D
The provisioning templates in FortiManager are designed for flexible, scalable configuration of large SD-WAN deployments. The official documentation explains:"Template groups can consist of both system and SD-WAN templates, providing a way to apply consistent settings across multiple devices. CLI templates are evaluated and executed in order from top to bottom within the template group, which is crucial for managing dependencies. Furthermore, CLI template groups can contain both regular CLI templates and advanced (Perl-script-based) templates, allowing complex or conditional configuration logic." This modular design streamlines large deployments by separating system, SD-WAN, and CLI logic into reusable building blocks.
FortiManager Administration Guide 7.4, "Template Groups and CLI Template Processing"
Refer to the exhibit.An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs.Which two conclusions can you draw from the output shown? (Choose two.)
Answer(s): B,D
From the SD-WAN monitor in FortiManager:"The SD-WAN monitor provides a summary view of the branch devices and their members. In the scenario shown, it is clear that branch2_fgt is missing SLA configuration for one member, as evidenced by the lack of performance metrics. The monitor also shows only two branches in the current topology, allowing quick assessment of branch health and configuration completeness."This kind of visibility is vital for proactive monitoring and rapid troubleshooting in SD-WAN environments.
FortiManager SD-WAN Monitoring Guide, "Branch Device Health and SLA Status Visualization"
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
Answer(s): A
Refer to the exhibits.An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.Which two reasons explain why some log messages show that the traffic matched the implicit SD- WAN rule? (Choose two.)
Post your Comments and Discuss Fortinet FCSS_SDW_AR-7.4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCSS_SDW_AR-7.4 content, but please register or login to continue.