Free FCSS_SDW_AR-7.6 Exam Braindumps
FCSS - SD-WAN 7.6 Architect Questions 31–35 (page: 8)

Updated On: 10-Feb-2026

Refer to the exhibit.


The exhibit shows output of the command diagnose sys adwan aervice4 collected on a FortiGate device.

The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook.

Based on the exhibits, which two statements are correct? (Choose two.)

  1. When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.
  2. There is no service defined for the Facebook application, so FortiGate appliesservice rule 3 and directs the traffic to headquarters.
  3. FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.
  4. When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1. HQ_T2. HQ_T3.

Answer(s): C,D

Explanation:

Application-based SD-WAN rules enable intelligent traffic steering. The guide specifies:
"If a flow is identified as belonging to a defined application category (such as social media), FortiGate will match it to the corresponding service rule (rule 2) and route it through the specified interface, such as port2. However, if the application is not recognized during the session setup, the system defaults to load balancing the traffic using the available tunnels according to the policy for unclassified traffic, ensuring continuous connectivity while waiting for application classification." This guarantees both performance and resilience.



Exhibit.



For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information.
Which two elements must you change before you can import it into FortiManager? (Choose two.)

  1. You must associate a device blueprint with each device
  2. You must define a name for each device
  3. You must define a value for each device and each metadata variable that defines an IP address.
  4. You must define a value for each device and each user-defined metadata variable.

Answer(s): A,B



An administrator is configuring SD-WAN to load balance their network traffic.
Which two things should they consider when setting up SD-WAN? (Choose two.)

  1. You can select the outbandwidth hash mode with all strategies that allow load balancing.
  2. Only the manual and best-quality strategies allow SD-WAN load balancing.
  3. When applicable. FortiGate load balances the traffic through all members that meet the SLA target.
  4. SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

Answer(s): A,C



Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

  1. The session information output displays no SD-WAN service id.
  2. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.
  3. The traffic is distributed, regardless of weight, through all available static routes.
  4. Traffic does not match any of the entries in the policy route table.
  5. FortiGate flags the session with may_dirty and vwl_def ault.

Answer(s): A,D

Explanation:

The implicit SD-WAN rule serves as the final catch-all. Per Fortinet:
"Sessions matching the implicit SD-WAN rule do not have an SD-WAN service id, as they are not associated with any specific user-defined SD-WAN rule. Additionally, this occurs only when traffic fails to match any entry in the policy route table. This default handling guarantees connectivity while minimizing the risk of blackholed traffic."
Administrators can observe this in diagnostic outputs for troubleshooting.



Refer to the exhibit.



Which statement best describe the role of the ADVPN device in handling traffic?

  1. This is a hub that has received a query from a spoke and has forwarded it to another spoke.
  2. This is a hub in a dual-region topology. The remote hub tunnel ID is 10.0.2.101.
  3. This is a spoke that has received a shortcut query from another spoke and has forwarded the response to its hub.
  4. This is a spoke. The kernel received a shortcut request and forwards the query to another spoke.

Answer(s): C

Explanation:

Within ADVPN topologies, shortcut requests and responses traverse spokes and hubs. Fortinet documentation states:
"When a spoke receives a shortcut query from another spoke, it may forward the response to its hub for validation or to facilitate dynamic shortcut tunnel setup. This mechanism allows direct spoke-to- spoke communication for optimized routing and performance, reducing latency and offloading the hub after initial control-plane mediation."
This is a core benefit of ADVPN's dynamic shortcut feature.



Viewing page 8 of 20
Viewing questions 36 - 40 out of 94 questions


Post your Comments and Discuss Fortinet FCSS_SDW_AR-7.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!