An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)
Answer(s): A,C
Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)
Answer(s): A,D
The implicit SD-WAN rule serves as the final catch-all. Per Fortinet:"Sessions matching the implicit SD-WAN rule do not have an SD-WAN service id, as they are not associated with any specific user-defined SD-WAN rule. Additionally, this occurs only when traffic fails to match any entry in the policy route table. This default handling guarantees connectivity while minimizing the risk of blackholed traffic."Administrators can observe this in diagnostic outputs for troubleshooting.
Refer to the exhibit.Which statement best describe the role of the ADVPN device in handling traffic?
Answer(s): C
Within ADVPN topologies, shortcut requests and responses traverse spokes and hubs. Fortinet documentation states:"When a spoke receives a shortcut query from another spoke, it may forward the response to its hub for validation or to facilitate dynamic shortcut tunnel setup. This mechanism allows direct spoke-to- spoke communication for optimized routing and performance, reducing latency and offloading the hub after initial control-plane mediation."This is a core benefit of ADVPN's dynamic shortcut feature.
Refer to the exhibits.You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit.Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit.Which statement describes why FortiManager could not install the configuration on the branches?
FortiManager enforces a strict distinction:"Firewall policies must reference SD-WAN zones, not individual SD-WAN members, when used in conjunction with SD-WAN templates. Attempting to install a policy that references a specific member (interface) will result in a deployment error, as member-level targeting is not supported in SD-WAN policy abstraction. This enforces centralized policy consistency and proper SD-WAN operation." Ensuring policies target zones allows FortiGate to dynamically select the optimal member.
What are three key routing principles of SD-WAN? (Choose three.)
Answer(s): B,D,E
Fortinet outlines key SD-WAN routing principles:"Policy routes are always evaluated before SD-WAN rules, meaning if a policy route matches, SD- WAN steering is bypassed. If the best route for a destination is not via an SD-WAN member, SD-WAN rules do not apply, and members are ignored if they lack a valid route. This hierarchy ensures traffic always follows the most deterministic and valid path according to configuration." Understanding these principles is critical for correct SD-WAN and routing integration.
Exhibit.Refer to the exhibit, which shows the SD-WAN rule status and configuration.Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?
Answer(s): D
Refer to the exhibits.You use FortiManager to configure SD-WAN on three branch devices.When you install the device settings, FortiManager prompts you with the error "Copy Failed" for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit.There are two different ways to resolve this issue. Based on the exhibits, which methods could you use? (Choose two.)
Answer(s): B,D
Specify the gateway of the SD-WAN member port1 with an IP address or use the default value The error log shows invalid ip prop[gateway]: ip4class(${sdwan_port1_gw}) invalid ip addr, meaning the variable ${sdwan_port1_gw} does not have a valid mapping. Assigning a valid IP address or default value for the gateway resolves this error.Review the per-device mapping configuration for metadata variables The issue is tied to how the metadata variable ${sdwan_port1_gw} is mapped for branch1_fgt. If this device does not have the variable properly defined in per-device mapping, the configuration will fail. Correcting the mapping ensures that the install works.
You configured an SD-WAN rule with the best quality strategy and selected the predefined health check, Default_FortiGuard, to check the link performances against FortiGuard servers.For the quality criteria, you selected Custom-profile-1.Which factors does FortiGate use, and in which order. to determine the link that it should use to steer the traffic?
With the Best Quality strategy, FortiGate first checks which links meet the SLA targets defined in the selected performance SLA (in this case, Custom-profile-1). Among those qualified links, FortiGate then uses the member configuration order to decide preference. If multiple links still qualify, it finally considers the member local cost to select the best path.
Post your Comments and Discuss Fortinet NSE6_SDW_AD-7.6 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE6_SDW_AD-7.6 content, but please register or login to continue.