Question 1

What are three key routing principles of SD-WAN? (Choose three.)

Options :

A : Directly connected routes have precedence over SD-WAN rules.

B : Policy routes have precedence over SD-WAN rules.

C : SD-WAN rules are skipped if the best route to the destination is a static route

D : SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

E : SD-WAN members are skipped if they do not have a valid route to the destination.

Answer: B,D,E

Question 2

Which statement describes FortiGate behavior when you reference a zone in a static route?

Options :

A : FoftiGate installs ECMP static routes for the first two members of the zone.

B : FortiGate ignores the static routes defined through members referenced in the zone.

C : FortiGate routes the traffic through the best performing member of the zone.

D : FortiGate installs a static route for each member in the zone.

Answer: D

Question 3

Refer to the exhibits.You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit. Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit. Which statement describes why FortiManager could not install the configuration on the branches?

Options :

A : You must direct SIA traffic to a VPN tunnel.

B : You cannot install firewall policies that reference an SD-WAN zone.

C : You cannot install firewall policies that reference an SD-WAN member.

D : You cannot install SIA and DIA rules on the same device.

Answer: C

Question 4

You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?

Options :

A : Update the IPsec tunnel configurations on the hub.

B : Update the SD-WAN configuration on the branches.

C : Update the IPsec tunnel configuration on the branches.

D : Delete the existing ADVPN configuration and configure ADVPN 2.0.

Answer: A

Question 5

Your FortiGate is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process?

Options :

A : Replace references to interfaces used as SD-WAN members in the routing configuration.

B : Purchase and install the SD-WAN license, and reboot the FortiGate device.

C : Replace references to interfaces used as SD-WAN members in the firewall policies.

D : Disable the interface that you want to use as an SD-WAN member.

Answer: C