Real FCSS_SDW_AR-7.6 Exam Questions are the Best Preparation Material [Q32-Q56]

4.5/5 - (6 votes)

Real FCSS_SDW_AR-7.6 Exam Questions are the Best Preparation Material

Practice on 2026 LATEST FCSS_SDW_AR-7.6 Exam Updated 96 Questions

NO.32 Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

Member metrics are measured only if a rule uses the SLA target.

SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.

SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.

NO.33 An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)

You can select the outbandwidth hash mode with all strategies that allow load balancing.

Only the manual and best-quality strategies allow SD-WAN load balancing.

When applicable, FortiGate load balances the traffic through all members that meet the SLA target.

SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

NO.34 You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.
What happens if you delete the SD-WAN member from the FortiGate GUI?

FodiGate accepts the deletion and removes routes as required.

FortiGate displays an error message. You must use the CLI to delete an SD-WAN member.

FortiGate displays an error message. SD-WAN zones must contain at least two members

FortiGate accepts the deletion and places the member in the default SD-WAN zone.

NO.35 Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

A template group can include a system template and an SD-WAN template.

Each template group can contain up to three IPsec tunnel templates.

CLI templates are applied in order, from top to bottom.

A CLI template group can contain CLI templates of both types.

A CLI template can be of type CLI script or Perl script.

NO.36 Refer to the exhibits. The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configuration and the underlay zone status. Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choose two.)

Only related TCP traffic is used for performance measurement.

The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.

Encrypted traffic is not used for the performance measurement.

FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.

NO.37 What is true about SD-WAN multiregion topologies?

It is not compatible with ADVPN.

Routing between the hub and spokes must be BGP.

Regions must correspond to geographical areas.

Each region has its own SD-WAN topology.

NO.38 You want FortiGate to use SD-WAN rules to steer local-out traffic.
Which two constraints should you consider? (Choose two.)

By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to pingand traceroute.

By default, local-out traffic does not use SD-WAN.

You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

You must configure each local-out feature individually to use SD-WAN.

NO.39 You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Update the IPsec tunnel configurations on the hub.

Update the SD-WAN configuration on the branches.

Update the IPsec tunnel configuration on the branches.

Delete the existing ADVPN configuration and configure ADVPN 2.0.

NO.40 Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?

The underlay zone contains three members.

You can delete the virtual-wan-link zones.

The overlay-factories zone contains no member.

You can move HUB1-VPN3 from the HUB1 zone to the overlay-shops zone.

NO.41 (Refer to the exhibit.

Based on the output shown in the exhibit, what can you conclude about the device role and how it handles health checks? Choose one answer.)

The device is a spoke and it provides embedded health-check measures for each tunnel to the hub.

The device is a spoke and it receives health-check measures for the tunnels of another spoke.

The device is a hub and it receives embedded health-check measures for each tunnel from the spoke.

The device is a hub and it receives health-check measures for the tunnels of a spoke.

NO.42 Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?

This is a spoke that has received a direct shortcut query from a remote spoke.

This is a hub, and two spokes, 192.2.0.1and 10.0.3.101, establish a shortcut.

This is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.

This is a spoke that has received a shortcut query from a remote hub.

NO.43 You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company’s SD-WAN hub. Which overlay routing configuration should you use?

BGP on loopback with dynamic BGP for ADVPN shortcut routing.

BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

BGP per overlay with dynamic BGP for ADVPN shortcut routing.

BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

NO.44 Refer to the exhibit. The administrator configured the SD-WAN rule ID 4 with two members (port1 and port2) and strategy lowest cost (SLA).
What are the two characteristics of the session shown in the exhibit? (Choose two.)

FortiGate steered this flow according to an SD-WAN rule.

FortiGate will never re-evaluate this session.

FortiGate steered this flow according to the application detected and the outgoing interface is port3.

FortiGate will re-evaluate this session if the outgoing interface goes down.

NO.45 Exhibit.

Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2 Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.

On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.

On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.

On hubs, auto-diacovery-sender must be enabled on the IPsec VPNs to spokes

NO.46 Refer to the exhibit. The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit.
Based on the configuration, which three conclusions can you draw about the characteristics and requirements of the VPN tunnel? (Choose three.)

The tunnel interface IP address on the spoke side is provided by the hub.

The remote end can be a third-party IPsec device.

The administrator must manually assign the tunnel interface IP address on the hub side

The remote end must support IKEv2.

This configuration allows user-defined overlay IP addresses.

NO.47 (Refer to the exhibit.

The event log on a FortiGate device is shown.
Based on the output shown in the exhibit, what can you conclude about the tunnels on this device? (Choose one answer))

There is one shortcut tunnel built from the master tunnel VPN4.

The voice traffic is steered through the VPN tunnel HUB1-VPN3.

The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

The master tunnel HUB2-VPN3 cannot accept Auto-Discovery VPN (ADVPN) shortcuts.

NO.48 In which SD-WAN template field can you use a metadata variable?

You can use metadata variables only to define interface members and the gateway IP.

Any field identified with a dollar sign (S) in a magnifying glass.

Any field identified with an “M” in a circle.

All SD-WAN template fields support metadata variables.

NO.49 Refer to the exhibit. You want to configure SD-WAN on a network as shown in the exhibit. The network contains many FortiGate devices. Some are used as NGFW, and some are installed with extensions such as FortiSwitch, FortiAP or FortiExtender. What should you consider when planning your deployment?

You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with FortiExtender.

You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.

You must use FortiManager to manage your SD-WAN topology.

You must build multiple SD-WAN topologies. Each topology must contain only one type of extension.

NO.50 Refer to exhibit.

Refer to the exhibit that shows event logs on FortiGate.
Based on the output shown in the exhibit, what can you say about the tunnels on this device?

The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.

The device steers voice traffic through the VPN tunnel HUB1-VPN3.

The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

There is one shortcut tunnel built from master tunnel VPN4.

NO.51 Refer to the exhibit.

Which statement correctly describes the role of the ADVPN device in handling traffic? Choose one answer.)

This device is a spoke that has received a direct shortcut query from a remote spoke.

This device is a hub, and two spokes, 192.2.0.1 and 10.0.3.101, established a shortcut.

This device is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.

This device is a spoke that has received a shortcut query from a remote hub.

NO.52 Exhibit.

Refer to the exhibit, which shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

When HUB1-VPN1 has 4% packet loss

When HUB1-VPN1 has 12% packet loss

When HUB1-VPN3 has 4% packet loss

When all three members have the same packet loss

NO.53 (Refer to the exhibit.

You update the spokes configuration of an existing auto-discovery VPN (ADVPN) topology by adding the parameters shown in the exhibit.
Which is a valid objective of those settings? Choose one answer.)

Enable the tunnels as overlay links.

Convert the configuration from ADVPN to ADVPN 2.0.

Prevent cross-overlay shortcuts.

Prevent multiple shortcuts from being established over the same overlay.

NO.54 Refer to the exhibit.

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network.
The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over HUB1-VPN1. However, the traffic is routed over HUB1-VPN3.
Based on the output shown in the exhibit, which two reasons, individually or together, could explain the observed behavior? (Choose two.)

HUB1-VPN3 has a higher member configuration priority than HUB1-VPN1.

The traffic matches a regular policy route configured with HUB1-VPN3 as the outgoing device

HUB1-VPN1 does not have a valid route to the destination

HUB1-VPN3 has a lower route priority value (higher priority) than HUB1-VPN1.

NO.55 Refer to the exhibits, which show the configuration of an SD-WAN rule and the corresponding rule status and routing table.

The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

The traffic will be routed over HUB1-VPN3.

The traffic will be routed over HUB1-VPN2

The traffic will be routed over HUB1-VPN1.

The traffic will be load balanced across all three overlays

NO.56 The administrator uses the FortiManager SD-WAN overlay template to prepare an SD-WAN deployment. Using information provided through the SD-WAN overlay template wizard, FortiManager creates templates ready to install on the spoke and hub devices.
What are the three templates created by the SD-WAN overlay template for a spoke device?
(Choose three.)

Static route template

Rules template

CLI template

BGP template

IPsec tunnel template

Fortinet FCSS_SDW_AR-7.6 Exam Syllabus Topics:

Topic	Details
Topic 1	Advanced IPsec: This section covers hub-and-spoke topologies, ADVPN configuration, and scalable multihub and multiregion IPsec deployments.
Topic 2	Rules and Routing: This section focuses on configuring SD-WAN rules for traffic steering and routing policies for path selection and failover.
Topic 3	Centralized Management: This domain addresses FortiManager-based SD-WAN deployment, branch configuration implementation, and overlay orchestration using SD-WAN Manager.
Topic 4	SD-WAN Basic Setup: This domain covers initial SD-WAN configuration, member and zone setup, and Performance SLA creation for link monitoring.
Topic 5	SD-WAN Troubleshooting: This domain focuses on diagnosing SD-WAN rule behavior, routing issues, and ADVPN tunnel problems.

Authentic FCSS_SDW_AR-7.6 Exam Dumps PDF – Apr-2026 Updated: https://www.dumpleader.com/FCSS_SDW_AR-7.6_exam.html

Fortinet FCSS_SDW_AR-7.6 Exam Syllabus Topics:

Leave a Reply Cancel reply