FCSS_SDW_AR-7.4 무료 덤프문제 온라인 액세스

You are planning a new SD-WAN deployment with the following criteria:
- Two regions
- Most of the traffic is expected to remain within its region
- No requirement for inter-region ADVPN
To remain within the recommended best practices, which routing protocol should you select for the overlays?

• A.IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.
• B.IBGP with BGP on loopback within each region and EBGP between the regions.
• C.OSPF for the routing within each region and EBGP between the regions.
• D.IBGP within each region and between the regions.

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the issue?

• A.Create dynamic mapping for the LAN interface for all devices in the installation target list.
• B.Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.
• C.Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.
• D.Use a metadata variable instead of a dynamic interface to define the firewall policy.

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?

• A.You can move HUB1-VPN3 from the HUB1 zone to the overlay-shops zone.
• B.The overlay-factories zone contains no member.
• C.You can delete the virtual-wan-link zones.
• D.The underlay zone contains three members.

Refer to the exhibit. Which action will FortiGate take if it detects SD-WAN members as dead?

• A.FortiGate sends alert messages through poft5 when it detects all SD-WAN members as dead.
• B.FortiGate fails over to the secondary device after it detects port5 as dead.
• C.FortiGate brings down port5 after it detects all SD-WAN members as dead.
• D.FoftiGate bounces port5 after it detects all SD-WAN members as dead.

When you use the command diagnose sys session list, how do you identify the sessions that correspond to traffic steered according to SD-WAN rules?

• A.You identify sessions steered according to SD-WAN rules with the data sdwan_service_id.
• B.You identify sessions steered according to SD-WAN rules with the data vwl_mbr_seq.
• C.You cannot identify SD-WAN sessions. You must use the sdwar. session filter.
• D.You identify sessions steered according to SD-WAN rules with the flag vwl.