FCSSNS WDS 3

In an SD-WAN rule, which setting enables you to skip the best-route check for SD-WAN rule matching? Select one: link-cost-threshold. tie-break. default. gateway.

Which SD-WAN rule strategy enables you to select a customized profile as quality criteria? Select one: Lowest cost (SLA). Manual. Maximize bandwidth (SLA). Best quality.

An administrator configured a best-quality SD-WAN rule with WAN1 and WAN2 as members. WAN1 has the highest configuration priority, and link-cost-threshold is set to 10. FortiGate reports a latency of 100 ms and 120 ms for WAN1 and WAN2, respectively. Which change in the measured latency will make WAN2 the new preferred member? Select one: When WAN2 has a latency of 100 ms. When WAN1 has a latency of 120 ms. When WAN2 has a latency lower than ~91 ms. When WAN1 has a latency lower than 100 ms.

Which statement about SLA targets under a performance SLA is true? Select one: SLA targets prevent flapping. SLA targets are required only for the Lowest Cost (SLA) and Maximize Bandwidth (SLA) rules strategies. You must configure an SLA target when you configure a performance SLA. You can configure only one SLA target per performance SLA.

In which rule strategy are cost and interface preference not considered selection factors? Select one: Manual. Best Quality. Maximize Bandwidth (SLA). Lowest Cost (SLA).

Which two statements about SD-WAN zones are true? (Choose two.) Select one or more: You are allowed to create static routes that reference an SD-WAN zone. After you add an interface to SD-WAN as a member, you must use zones to reference the member in firewall policies. You can configure only one SD-WAN zone per VDOM. You must configure the SD-WAN zone with a minimum of two members.

If the outgoing interface for an established SNATed session changes, which two requirements must the configuration meet so that FortiGate continues forwarding packets from that session to the new outgoing interface? (Choose two.) Select one or more: You must enable the snat-route-change setting. You must have a firewall policy that accepts the new traffic flow for the session. You must set firewall-session-dirty to check-new on the new matching firewall policy. You must configure FortiGate so the SNAT IP address doesn’t change.

What does forward error correction do? Select one: It buffers packets and transmits them at the appropriate speed. It generates parity packets with redundant data. It reorders packets at the destination. It sends the same packets across multiple links.

Which SD-WAN rule strategy allows you to send traffic to a specific member without using any performance SLA? Select one: Lowest Cost (SLA). Manual. Best Quality. Maximize Bandwidth (SLA).

Which templates are created by the SD-WAN Overlay Template for a hub device? Select one: IPsec, Static Route, BGP. SD-WAN, Static Route, IPsec. BGP, IPsec, CLI. IPsec, SD-WAN, BGP.

Which SD-WAN rule strategy load balances traffic among selected SD-WAN members using the round-robin method? Select one: Manual. Lowest Cost (SLA). Maximize Bandwidth (SLA). Best Quality.

Which two statements about the Update Static Route setting under the Performance SLA section are true? (Choose two.) Select one or more: If Update Static Route is enabled, FortiGate marks static routes using the same gateway as a dead member, as inactive. If Update Static Route is enabled, FortiGate marks static routes using the same gateway as an alive member, as active. If Update Static Route is disabled, FortiGate stops sending probes to monitor members. If Update Static Route is enabled, FortiGate removes all SD-WAN routes from the routing table.

Which statement best defines Source_Destination IP load balancing? Select one: Sessions from the same source and destination IP pair use the same interface. Sessions from the same destination IP address use the same interface. Sessions from the same source IP address use the same interface. Sessions are distributed based on weights assigned on the source and destination interfaces.

Which three protocols can be used for the status check in a performance SLA? (Choose three.) Select one or more: SSH. TWAMP. HTTP. traceroute. DNS.

Which two statements about SD-WAN rules are ost (SLA) SD-WAN rule? Select one or more: SD-WAN rules take precedence over static routes. Regular policy routes take precedence over SD-WAN rules. SD-WAN rules are treated as static routes. SD-WAN rules can be used only to define load balancing methods.

Which two interfaces can be added to SD-WAN as members? (Choose two.) Select one or more: Virtual wire pair. IPsec interface. VLAN. Zone.

By default, what member information does FortiGate consider when selecting the best member in a lowest cost (SLA) SD-WAN rule? Select one: Status of configured SLA targets, cost, and corrected metric. Status of configured SLA targets, cost, and priority. Interface index number, cost, and priority. Status of configured SLA targets, interface index number, and priority.

When is an SD-WAN member considered to be in the dead state? Select one: When the SD-WAN member has an active route in a routing table. When the SD-WAN member reaches the failure threshold. When both servers used for health checks are reachable by an interface member. When the SD-WAN member meets the SLA target requirement.

In a spoke IPsec phase 1 configuration, which setting must be enabled in order for the spoke to participate in ADVPN? Select one: auto-discovery-forwarder. auto-discovery-sender. auto-discovery-receiver. auto-discovery-shortcuts.

In an SD-WAN rule, which setting can be used to add BGP learned routes as dynamic destinations? Select one: dscp-forward-tag. route-tag. src-negate. tos-mask.

Which session flag indicates the ID of the matching SD-WAN member? Select one: sdwan_service_id. serial. sdwan_mbr_seq. policy_id.

Which statement about SD-WAN management on FortiManager is true? Select one: You must manually refresh the SD-WAN monitor page to get the latest status information. You can import an existing SD-WAN configuration into SD-WAN templates. You can’t reference metadata variables in CLI templates and SD-WAN templates. You can configure SD-WAN using central management mode only.

Which two features are supported by IKEv2 and not by IKEv1? (Choose two.) Select one or more: Network overlay ID. IKE mode configuration. Asymmetric authentication. IKE aggressive mode.