最新なFortinet FCSS_SDW_AR-7.4問題集（75題）、真実試験の問題を全部にカバー！

質問 1：
Refer to the exhibit. The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate device that supports hardware offloading.
Based on the information shown in the exhibits, which two conclusions can you draw? (Choose two.)

A. The auxiliary session can be offloaded to hardware.
B. The reply direction of the asymmetric traffic flows from port2 to port3.
C. The original direction of the symmetric traffic flows from port3 to port2.
D. By default, FortiGate offloads symmetric and asymmetric flows.
正解：B,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
A. A template group can include a system template and an SD-WAN template.
B. Each template group can contain up to three IPsec tunnel templates.
C. CLI templates are applied in order, from top to bottom.
D. A CLI template group can contain CLI templates of both types.
E. A CLI template can be of type CLI script or Perl script.
正解：A,C,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

A. On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
B. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.
C. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
D. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
正解：A,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule Why?

A. You must enable the feature on the CLI.
B. FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
C. You must enable the feature first using the GUI menu System > Feature Visibility.
D. You cannot use applications as the destination when FortiGate is used for a DIA setup.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
You have configured the performance SLA with the probe mode as Prefer Passive.
What are two observable impacts of this configuration? (Choose two.)
A. FortiGate passively monitors the member if TCP traffic is passing through the member.
B. FortiGate passively monitors the member if ICMP traffic is passing through the member.
C. FortiGate can offload the traffic that is subject to passive monitoring to hardware.
D. During passive monitoring, the SLA performance rule cannot detect dead members.
E. After FortiGate switches to active mode, the SLA performance rule falls back to passive monitoring after 3 minutes.
正解：A,B
解説: (Pass4Test メンバーにのみ表示されます)

質問 6：
Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred member?

A. When HUB1-VPN3 has 4% packet loss
B. When HUB1-VPN1 has 4% packet loss
C. When HUB1-VPN1 has 12% packet loss
D. When all three members have the same packet loss
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 7：
Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices.
When you install the device settings. FortiManager prompts you with the error "Copy Failed" for the device branch1_fat When you click the log button. FortiManager displays the message shown in the exhibit.
Based on the exhibits, which statement best describes the issue and how you can resolve it?



A. Check the connection between branch1_fgt and FortiManager
B. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port! without metadata variables.
C. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.
D. Check the metadata variable definitions, and review the per-device mapping configuration.
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 8：
In which SD-WAN template field can you use a metadata variable?
A. All SD-WAN template fields support metadata variables.
B. Any field identified with a dollar sign (S) in a magnifying glass.
C. You can use metadata variables only to define interface members and the gateway IP.
D. Any field identified with an "M" in a circle.
正解：D