Question 1

Refer to the exhibit, which shows diagnostic output.

A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

Options :

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 2

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

Options :

A : Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.

B : Objects from the root FortiGate will only be synchronized to FGT__2.

C :

Objects from the root FortiGate will not be synchronized to any downstream FortiGate.

D : Objects from the root FortiGate will only be synchronized to FGT_3.

Answer: A

Question 3

Refer to the exhibit.

You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3 needs to

be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not establishing any

OSPF connection.

What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors without

affecting the DR/BDR election?

Options :

A :

B :

C :

D :

Answer: B

Question 4

Refer to the exhibit.

You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

Options :

A : With no members configured

B : With members and assign overlay interfaces

C : With members and assign interfaces but do not specify a gateway

D : With members without interface assignments

Answer: B

Question 5

Refer to the exhibit showing a firewall policy configuration.