Q: 1
Refer to the exhibit.
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?Options
Discussion
Option B similar question showed up in an official guide review session.
Call it B. The hub FortiGate should not have any extensions like FortiSwitch or FortiAP attached, otherwise performance and reliability can suffer. Spokes can run those, but best to keep the hubs clean. Pretty sure that's what Fortinet recommends. Someone correct me if you know otherwise.
Yeah, B fits. Fortinet recommends hubs without extensions for stability and performance reasons. Pretty sure that's the best approach here.
Has anyone checked the official guide for this? Practice exams suggest FortiManager may be needed for complex SD-WAN topologies, so wouldn't C make sense too? Not totally sure since labs usually focus more on hub vs spoke roles.
Honestly, I think A could work since you can technically add all devices into the SD-WAN topology.
B imo, had something like this in a mock, hubs should be FortiGate only with no extensions.
Why wouldn't Option A work here if the hubs had extensions?
Yeah it’s B here. Hubs in a Fortinet SD-WAN setup should be plain FortiGate devices without extensions like FortiSwitch or AP, keeps stability up. Spokes can run extensions but not hubs. Pretty sure I’ve seen this in official docs, but open to correction.
I don't think it's A. The trap is believing you can use any device as a hub, but best practice (and exam reports) show hubs need to be FortiGates without extensions attached. B covers that requirement. Anyone see docs saying otherwise?
B tbh. Hubs need to be clean FortiGates, no extensions like AP or Switch attached. Keeps the SD-WAN core stable. Disagree?
Be respectful. No spam.
An administrator is testing application steering in SD-WAN. Before generating test traffic, the
administrator collected the information shown in the first exhibit. After generating GoToMeeting test
traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in
the second exhibit.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the
traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-
WAN rule? (Choose two.)
Which statement best describe the role of the ADVPN device in handling traffic?
Refer to the exhibit, which shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new
preferred member?
The administrator analyzed the traffic between a branch FortiGate and the server located in the data
center, and noticed the behavior shown in the diagram.
When the LAN clients located behind FGT1 establish a session to a server behind DC-1, the
administrator observes that, on DC-1, the reply traffic is routed overT2. even though T1 is the
preferred member in
the matching SD-WAN rule.
What can the administrator do to instruct DC-1 to route the reply traffic through the member with
the best performance?
The exhibit shows output of the command diagnose sys adwan aervice4 collected on a FortiGate
device.
The administrator wants to know through which interface FortiGate will steer traffic from local users
on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook.
Based on the exhibits, which two statements are correct? (Choose two.)