Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
Answer(s): A,C,D
The provisioning templates in FortiManager are designed for flexible, scalable configuration of large SD-WAN deployments. The official documentation explains:"Template groups can consist of both system and SD-WAN templates, providing a way to apply consistent settings across multiple devices. CLI templates are evaluated and executed in order from top to bottom within the template group, which is crucial for managing dependencies. Furthermore, CLI template groups can contain both regular CLI templates and advanced (Perl-script-based) templates, allowing complex or conditional configuration logic." This modular design streamlines large deployments by separating system, SD-WAN, and CLI logic into reusable building blocks.
FortiManager Administration Guide 7.4, "Template Groups and CLI Template Processing"
Refer to the exhibit.An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs.Which two conclusions can you draw from the output shown? (Choose two.)
Answer(s): B,D
From the SD-WAN monitor in FortiManager:"The SD-WAN monitor provides a summary view of the branch devices and their members. In the scenario shown, it is clear that branch2_fgt is missing SLA configuration for one member, as evidenced by the lack of performance metrics. The monitor also shows only two branches in the current topology, allowing quick assessment of branch health and configuration completeness."This kind of visibility is vital for proactive monitoring and rapid troubleshooting in SD-WAN environments.
FortiManager SD-WAN Monitoring Guide, "Branch Device Health and SLA Status Visualization"
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
Answer(s): A
Refer to the exhibits.An administrator is testing application steering in SD-WAN. Before generating test traffic, theadministrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.Which two reasons explain why some log messages show that the traffic matched the implicit SD- WAN rule? (Choose two.)
Which statement describes FortiGate behavior when you reference a zone in a static route?
Answer(s): D
When referencing a zone in a static route, FortiGate's behavior is described as:"Referencing a zone in a static route causes FortiGate to install a static route for each member interface of the zone. This enables ECMP (Equal-Cost Multi-Path) and load balancing where supported and ensures that traffic can be steered over any valid zone member according to SD-WAN rules or standard routing."This mechanism is fundamental to Fortinet's implementation of SD-WAN and simplifies large, multi- interface deployments.
FortiOS 7.4 Routing Guide, "Zone-based Routing and ECMP Behavior"
Refer to the exhibit.An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network.The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over HUB1-VPN1.However, the traffic is routed over HUB1-VPN3.Based on the output shown in the exhibit, which two reasons, individually or together, could explain the observed behavior? (Choose two.)
Answer(s): C,D
Refer to the exhibit.The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram.When the LAN clients located behind FGT1 establish a session to a server behind DC-1, the administrator observes that, on DC-1, the reply traffic is routed overT2. even though T1 is the preferred member inthe matching SD-WAN rule.What can the administrator do to instruct DC-1 to route the reply traffic through the member withthe best performance?
Answer(s): B
When asymmetric routing is observed (such as reply traffic not following the optimal path), the solution is:"The auxiliary-session feature, enabled under config system settings, allows FortiGate to consider multiple egress interfaces for reply traffic, not just the original ingress interface. This is crucial for SD- WAN environments where the best path may differ between forward and return directions, especially when performance or policy rules are dynamically evaluated." Activating this ensures reply traffic is always sent on the member with the best real-time metrics.
FortiOS 7.4 CLI Reference, "auxiliary-session for SD-WAN Path Optimization"
When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management and to share costly resources.In which two situations will the MSSP install the hub in customer premises? (Choose two.)
Post your Comments and Discuss Fortinet NSE6_SDW_AD-7.6 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE6_SDW_AD-7.6 content, but please register or login to continue.