Question 1

Refer to the exhibits.An administrator is testing application steering in SD-WAN. Before generating test traffic, the administratorcollected the information shown in the first exhibit. After generating GoToMeeting test traffic, theadministrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic tomatch rule ID 1.Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule?(Choose two.)

Options :

A : Full SSL inspection is not enabled on the matching firewall policy.

B : The session 3-tuple did not match any of the existing entries in the ISDB application cache.

C : FortiGate could not refresh the routing information on the session after the application was detected.

D : No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting

Answer: B,D

Question 2

You are planning a new SD-WAN deployment with the following criteria:- Two regions- Most of the traffic is expected to remain within its region- No requirement for inter-region ADVPNTo remain within the recommended best practices, which routing protocol should you select for the overlays?

Options :

A : OSPF for the routing within each region and EBGP between the regions.

B : IBGP with BGP on loopback within each region and EBGP between the regions.

C : IBGP with BGP per overlays within each region and IBGP with BGP on loopback between the regions.

D : IBGP within each region and between the regions.

Answer: B

Question 3

(Refer to the exhibit. You noticed that one SD-WAN member went down and you immediately collected thesession output shown in the exhibit. What can you conclude from this output? Choose one answer.)

Options :

A : FortiGate didn’t receive any traffic related to this session after the interface went down.

B : FortiGate flushed the gateway for the session.

C : FortiGate cannot reevaluate the session.

D : FortiGate already reevaluated this session.

Answer: D

Question 4

An administrator is configuring SD-WAN to load balance their network traffic. Which two things should theyconsider when setting up SD-WAN? (Choose two.)

Options :

A : You can select the outbandwidth hash mode with all strategies that allow load balancing.

B : Only the manual and best-quality strategies allow SD-WAN load balancing.

C : When applicable. FortiGate load balances the traffic through all members that meet the SLA target.

D : SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

Answer: A,C

Question 5

Refer to the exhibits.The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs ofFacebook and YouTube along with the firewall policy configuration and the underlay zone status.Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choosetwo.)

Options :

A : Only related TCP traffic is used for performance measurement.

B : The performance is an average of the metrics measured for Facebook and YouTube traffic passingthrough the member.

C : Encrypted traffic is not used for the performance measurement.

D : FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passingthrough the member.

Answer: B,D