Question 1

Refer to the exhibits.You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit. Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit. Which statement describes why FortiManager could not install the configuration on the branches?

Options :

A : You must direct SIA traffic to a VPN tunnel.

B : You cannot install firewall policies that reference an SD-WAN zone.

C : You cannot install firewall policies that reference an SD-WAN member.

D : You cannot install SIA and DIA rules on the same device.

Answer: C

Question 2

Which statement describes FortiGate behavior when you reference a zone in a static route?

Options :

A : FoftiGate installs ECMP static routes for the first two members of the zone.

B : FortiGate ignores the static routes defined through members referenced in the zone.

C : FortiGate routes the traffic through the best performing member of the zone.

D : FortiGate installs a static route for each member in the zone.

Answer: D

Question 3

Your FortiGate is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process?

Options :

A : Replace references to interfaces used as SD-WAN members in the routing configuration.

B : Purchase and install the SD-WAN license, and reboot the FortiGate device.

C : Replace references to interfaces used as SD-WAN members in the firewall policies.

D : Disable the interface that you want to use as an SD-WAN member.

Answer: C

Question 4

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Options :

A : Update the IPsec tunnel configurations on the hub.

B : Update the SD-WAN configuration on the branches.

C : Update the IPsec tunnel configuration on the branches.

D : Delete the existing ADVPN configuration and configure ADVPN 2.0.

Answer: A

Question 5

(You want to configure two static routes: one that references an SD-WAN zone and a second one that references an SD-WAN member that belongs to that zone. Which statement about this scenario is true? Choose one answer.)

Options :

A : You cannot create static routes for individual SD-WAN members.

B : You cannot create static routes that reference an SD-WAN zone.

C : The destination subnets must be different.

D : The source subnets must be different.

Answer: C

Free NSE6_SDW_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: