FCSS_SDW_AR-7.6 Exam Training Practice Tests (Fortinet FCSS

Question 1

Refer to the exhibits.

The exhibits show an SD-WAN event log, the member status, and the SD-WAN rule configuration.
Which two conclusions can you draw from the information shown? (Choose two.)

A. Port2 has a lower latency than port1. B. The administrator configured the service ID 1 with the highest priority member for port2. C. The administrator configured the SD-WAN rule ID 1 with the default strategy mode. D. FortiGate updated the outgoing interface list on the rule so it prefers port2.

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Which statement best describe the role of the ADVPN device in handling traffic?

A. This is a spoke. The kernel received a shortcut request and forwards the query to another spoke. B. This is a spoke that has received a shortcut query from another spoke and has forwarded the response to its hub. C. This is a hub in a dual-region topology. The remote hub tunnel ID is 10.0.2.101. D. This is a hub that has received a query from a spoke and has forwarded it to another spoke.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings. FortiManager prompts you with the error "Copy Failed" for the device branch1_fat When you click the log button. FortiManager displays the message shown in the exhibit.

A. Based on the exhibits, which statement best describes the issue and how you can resolve it? B. Check the connection between branch1_fgt and FortiManager C. Check the metadata variable definitions, and review the per-device mapping configuration. D. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port! without metadata variables. E. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.

Correct Answer: C

Question 4

Refer to the exhibit.

How does FortiGate handle the traffic with the source IP 10.0.1.130 and the destination IP 128.66.0 125?

A. FortiGate steers the traffic flow through port7. B. FortiGate routes the traffic flow according to the forwarding information base (FIB). C. FortiGate load balances the traffic flow through port7 and port8. D. FortiGate drops the traffic flow.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule.
What could be a possible cause of the traffic interruption?

A. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration. B. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN. C. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration. D. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

(Refer to the exhibit.

What can you conclude from the output shown? Choose one answer.)

A. It is a spoke device. The members of SD-WAN rule 3 are grouped into two zones. B. It is a hub device. It allowed the establishment of three auto-discovery VPN (ADVPN) shortcuts. C. It is a spoke device. SD-WAN rule 3 is configured with nine members. D. It is a spoke device. SD-WAN rule 4 allows three shortcut tunnels.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Refer to the exhibits.

The administrator configured a device blueprint and CLI scripts as shown in the exhibits, to prepare for onboarding FortiGate devices in the company's stores. Later, a technician prepares a FortiGate 51G with a basic configuration and connects it to the network. The basic configuration contains the port1 configuration and the minimal configuration required to allow the device to connect to FortiManager.
After the device first connects to FortiManager, FortiManager updates the device configuration.
Based on the exhibits, which actions does FortiManager perform?

A. FortiManager updates access rights only for port1. FortiManager cannot update the IP address because it was already set manually. B. FortiManager does not update the port1 configuration because FortiManager does not change the configuration of interfaces with fgfm access. C. FortiManager updates the device configuration according to the selected templates. It applies the corp_st template first. D. FortiManager updates the configuration of port1, port2, and port5. The three ports might get new IP addresses.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)

A. Create a ZTP template. B. Define metadata variables value for each device. C. Create model devices. D. Update the DHCP server configuration. E. Create policy blueprint.

Correct Answer: A,C,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

As an IT manager for a healthcare company, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP). Each site must maintain direct internet access and ensure that it is secure. You expected significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP.
Which two MSSP deployment blueprints best address the customer's requirements? (Choose two.)

A. Install a dedicated hub at the MSSP premises for the new customer, and install the spokes at the customer premises. B. Install the hub and spokes at the customer premises and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM. C. Use a shared hub at the MSSP premises and a dedicated hub at the customer premises and install the spokes at the customer premises. D. Use a shared hub at the MSSP premises with a dedicated VDOM for the new customer, and install the spokes at the customer premises.

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Within the context of SD-WAN, what does SIA correspond to?

A. Local Breakout B. Remote Breakout C. Software Internet Access D. Secure Internet Authorization

Correct Answer: A

Fortinet FCSS - SD-WAN 7.6 Architect - FCSS_SDW_AR-7.6 Exam Practice Test