Free Access Fortinet.FCSS_SDW_AR-7.4.v2025-12-31.q73 Practice Test (Page 13)

Question 56

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD- WAN hub. Which overlay routing configuration should you use?

A.BGP per overlay with dynamic BGP for ADVPN shortcut routing.

B.BGP on loopback with dynamic BGP for ADVPN shortcut routing.

C.BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

D.BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

Question 57

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule.
What could be a possible cause of the traffic interruption?

A.FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration.

B.FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration.

C.FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members.

D.FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN.

Question 58

Which statement about SD-WAN zones is true?

A.You cannot use an SD-WAN zone in static route definitions.

B.An SD-WAN zone can contain only one type of interface.

C.An SD-WAN zone can contain between 0 and 512 members.

D.You can configure up to 32 SD-WAN zones per VDOM.

Question 59

Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)

A.The traffic is distributed, regardless of weight, through all available static routes.

B.Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

C.FortiGate flags the session with may_dirty and vwl_def ault.

D.The session information output displays no SD-WAN service id.

E.Traffic does not match any of the entries in the policy route table.

Question 60

Refer to the exhibits. The first exhibit shows the SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template, and the second exhibit shows the output of command diagnose sys sdwan membercollected on a FortiGate device.
Which statement best describes what the diagnose output shows?