Online Access Free FCSS_SDW_AR-7.4 Practice Test

Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

• A.On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
• B.On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
• C.On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
• D.On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.

Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?

• A.This is a hub in a dual-region topology. The remote hub tunnel ID is 10.0.2.101.
• B.This is a spoke that has received a shortcut query from another spoke and has forwarded the response to its hub.
• C.This is a hub that has received a query from a spoke and has forwarded it to another spoke.
• D.This is a spoke. The kernel received a shortcut request and forwards the query to another spoke.

You manage an SD-WAN topology. You will soon deploy 50 new branches.
Which three tasks can you do in advance to simplify this deployment? (Choose three.)

• A.Create policy blueprint.
• B.Define metadata variables value for each device.
• C.Create model devices.
• D.Create a ZTP template.
• E.Update the DHCP server configuration.

Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule Why?

• A.FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
• B.You must enable the feature on the CLI.
• C.You must enable the feature first using the GUI menu System > Feature Visibility.
• D.You cannot use applications as the destination when FortiGate is used for a DIA setup.

Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown. Which statement best describes the cause of the issue?

• A.You should review the branch1_fgt configuration for configured tunnels in the rootVDOM.
• B.You can assign only one IPsec template to each FortiGate device.
• C.You should use the same outgoing interface of both templates.
• D.You can assign only one template with a tunnel type of static to each FortiGate device.