FCSS_SDW_AR-7.4 Exam Dumps - FCSS - SD-WAN 7.4 Architect

Go to page:

Question # 17

Refer to the exhibits.

You use FortiManager to configure SD-WAN on three branch devices.

When you install the device settings. FortiManager prompts you with the error "Copy Failed" for the device branch1_fat When you click the log button. FortiManager displays the message shown in the exhibit.

Based on the exhibits, which statement best describes the issue and how you can resolve it?

Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.

Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port! without metadata variables.

Check the metadata variable definitions, and review the per-device mapping configuration.

Check the connection between branch1_fgt and FortiManager

Full Access

Question # 18

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.

What happens if you delete the SD-WAN member from the FortiGate GUI?

FodiGate accepts the deletion and removes routes as required.

FortiGate displays an error message. You must use the CLI to delete an SD-WAN member.

FortiGate displays an error message. SD-WAN zones must contain at least two members

FortiGate accepts the deletion and places the member in the default SD-WAN zone.

Full Access

Question # 19

Exhibit.

The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit.

Based on the configuration, which three conclusions can you draw about the characteristics and requirements of the VPN tunnel? (Choose three.)

The tunnel interface IP address on the spoke side is provided by the hub.

The remote end can be a third-party IPsec device.

The administrator must manually assign the tunnel interface IP address on the hub side

The remote end must support IKEv2.

This configuration allows user-defined overlay IP addresses.

Full Access

Question # 20

Refer to the exhibits.

You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit.

Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit.

Which statement describes why FortiManager could not install the configuration on the branches?

You must direct SIA traffic to a VPN tunnel.

You cannot install firewall policies that reference an SD-WAN zone.

You cannot install firewall policies that reference an SD-WAN member.

You cannot install SIA and DIA rules on the same device.

Full Access