FCSS_SDW_AR-7.6 무료 덤프문제 온라인 액세스

(You plan a large SD-WAN deployment for a global company. You want to divide the network architecture into five geographical regions and install two hubs in each region for increased redundancy. You expect a significant amount of traffic within each region and limited traffic flow between spokes in different regions. You plan to connect the small branch sites to only the closest hub in their regions and the large branch sites to the two hubs in the regions.
Which statement about your plan is true? Choose one answer.)

• A.It is possible. You should use eBGP as the routing protocol between the regions.
• B.It is not possible. FortiOS 7.6 supports multihub topologies with up to four hubs.
• C.It is possible. You should use FortiManager and the overlay orchestrator multihub topology to simplify the deployment.
• D.It is not possible. In a region, all spokes must have either single-hub or dual-hub connectivity.

Refer to the exhibit.

Which statement best describe the role of the ADVPN device in handling traffic?

• A.This is a hub that has received a query from a spoke and has forwarded it to another spoke.
• B.This is a spoke that has received a shortcut query from another spoke and has forwarded the response to its hub.
• C.This is a spoke. The kernel received a shortcut request and forwards the query to another spoke.
• D.This is a hub in a dual-region topology. The remote hub tunnel ID is 10.0.2.101.

Refer to the exhibits.

The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate.
The administrator increases the member priority on port2 to 20.
Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

• A.FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.
• B.FortiGate routes only new sessions over port2.
• C.FortiGate flags the sessions as dirty.
• D.FortiGate continues routing all existing sessions over port2.
• E.FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading.
Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

• A.The reply direction of the asymmetric traffic flows from port2 to port3.
• B.The auxiliary session can be offloaded to hardware.
• C.The original direction of the symmetric traffic flows from port3 to port2.
• D.By default, FortiGate offloads symmetric and asymmetric flows.

Refer to the exhibits.


The administrator configured a device blueprint and CLI scripts as shown in the exhibits, to prepare for onboarding FortiGate devices in the company's stores. Later, a technician prepares a FortiGate 51G with a basic configuration and connects it to the network. The basic configuration contains the port1 configuration and the minimal configuration required to allow the device to connect to FortiManager.
After the device first connects to FortiManager, FortiManager updates the device configuration.
Based on the exhibits, which actions does FortiManager perform?

• A.FortiManager does not update the port1 configuration because FortiManager does not change the configuration of interfaces with fgfm access.
• B.FortiManager updates the device configuration according to the selected templates. It applies the corp_st template first.
• C.FortiManager updates access rights only for port1. FortiManager cannot update the IP address because it was already set manually.
• D.FortiManager updates the configuration of port1, port2, and port5. The three ports might get new IP addresses.