
|
|||||||||||||||||||||||||||
Certification
This exam is part of the following certification tracks:
* Fortinet Certified Solution Specialist - Network Security: This certification
validates your ability to design, administer, monitor, and troubleshoot Fortinet
network security solutions.
* Fortinet Certified Solution Specalist - Secure Access Service Edge: This FCSS
- SASE certification validates your ability to design, administer, monitor, and
troubleshoot Fortinet SASE solutions.
Visit the Cybersecurity Certification page for information about certification
requirements.
Exam
The FCSS - FCSS - SD-WAN 7.4 Architect exam evaluates your knowledge of, and
expertise with, the Fortinet SD-WAN solution.
This exam tests your applied knowledge of the integration, administration,
troubleshooting, and central management of a secure
SD-WAN solution composed of FortiOS 7.4.4, FortiManager 7.4.5, and FortiAnalyzer
7.4.5.
Once you pass the exam, you will receive the following exam badge:
Audience
The FCSS - FCSS - SD-WAN 7.4 Architect exam is intended for network and
security professionals who are responsible for the design, administration, and
support of a secure SD-WAN infrastructure composed of many FortiGate devices.
Exam Details
Exam name FCSS - SD-WAN 7.4 Architect
Exam series FCSS_SDW-7.4-AR
Time allowed 75 minutes
Exam questions 38 multiple-choice questions
Scoring Pass or fail. A score report is available from your Pearson VUE account.
Language English, Japanese
Product version FortiOS 7.4, FortiManager 7.4
Exam Topics
Successful candidates have applied knowledge and skills in the following
areas and tasks:
* SD-WAN configuration
* Configure a basic SD-WAN setup
* Configure SD-WAN members and zones
* Configure performances SLAs
* Rules and Rrouting
* Configure SD-WAN rules
* Configure SD-WAN routing
* Centralized management
* Deploy SD-WAN from FortiManager
* Implement the branch configuration deployment
* Use the SD-WAN overlay template
* Advanced IPsec
* Deploy a hub-and-spoke IPsec topology for SD-WAN
* Configure ADVPN
* Configure IPsec multihub, mulitiregion, and large deployments
* SD-WAN troubleshooting
* Troubleshoot SD-WAN rules and sessions behavior
* Troubleshoot SD-WAN routing
* Troubleshoot ADVPN
Training Resources
The following resources are recommended for attaining the knowledge and skills
that are covered on the exam. The recommended training is available as a
foundation for exam preparation. In addition to training, you are strongly
encouraged to
have hands-on experience with the exam topics and objectives.
* FCSS - SD-WAN 7.4 course and hands-on labs
* FCP - FortiGate Administrator 7.4 course and hands-on labs
* FCP - FortiManager Administrator 7.4 course and hands-on labs
* FortiOS 7.4—Administration Guide
* FortiOS 7.4—CLI Reference
* FortiManager 7.4—Administration Guide
Experience
* 3 years of experience with networking and network security
* 2 years of experience with FortiGate and FortiManager
FCSS_SDW_AR-7.4 Brain Dumps Exam + Online / Offline and Android Testing Engine & 4500+ other exams included
$50 - $25 (you save $25)
Buy Now
QUESTION 1
Exhibit.
Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs
between Hub 1 and Hub 2
Which two configuration settings are required for the spoke A1 to establish an
ADVPN shortcut with the spoke B2? (Choose two.)
A. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
B. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
C. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to
spokes.
D. On hubs, auto-diacovery-sender must be enabled on the IPsec VPNs to spokes
Answer: A, D
QUESTION 2
Refer to the exhibit.
Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN
subnet 10.0.1.0 to the corporate server 10.2.5.254?
A. SD-WAN service rule 3 and interface HUB1-VPN2.
B. SD-WAN service rule 3 and interface HUB1-VPN3.
C. SD-WAN service rule 4 and port1 or port2.
D. SD-WAN service rule 4 and interface port2.
Answer: B
QUESTION 3
Refer to the exhibit.
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are
installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?
A. You can build an SD-WAN topology that includes all devices. The hubs can be
FortiGate devices with Forti Extender.
B. You can build an SD-WAN topology that includes all devices. The hubs must be
devices without extensions.
C. You must use FortiManager to manage your SD-WAN topology.
D. You must build multiple SD-WAN topologies. Each topology must contain only
one type of extension.
Answer: B
QUESTION 4
Refer to the exhibit.
Refer to the exhibit that shows event logs on FortiGate.
Based on the output shown in the exhibit, what can you say about the tunnels on
this device?
A. The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.
B. The device steers voice traffic through the VPN tunnel HUB1-VPN3.
C. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.
D. There is one shortcut tunnel built from master tunnel VPN4.
Answer: B
QUESTION 5
Exhibit.
Which action will FortiGate take if it detects SD-WAN members as dead?
A. FoftiGate bounces port5 after it detects all SD-WAN members as dead.
B. FortiGate fails over to the secondary device after it detects port5 as dead.
C. FortiGate sends alert messages through poft5 when it detects all SD-WAN
members as dead
D. FortiGate brings down port5 after it detects all SD-WAN members as dead.
Answer: D
Certainly, here's a rewritten version of your text:
Packiam Vijendran 1 months ago - Malaysia
Passed the exam yesterday, 95% of the question were from this site. Note: Pay
more attention to all the community discussions on each question, instead of the
answers provided by the examtopics and I strongly suggest to get the contributor
access.
upvoted 4 times
Javier Cardaba Enjuto 2 months, 1 week ago - Spain
Excellent pre-exam session tool
upvoted 2 times
Palanisamy Arulmohan 1 months, 1 week ago - USA
I passed today, 94 questions asked and 99% of them were in this dump.
3 labs: BGP (as-override), HSRP, OSPF (without network statement)
upvoted 4 times
peppinauz 3 months, 2 weeks ago
I pass my exam, dump is valid about 90-95%. review the community answers!!
upvoted 6 times
Oberoi Ankit3 months, 3 weeks ago - USA Texas
Passed exam today dump still accurate. almost all the questions are here, some
are overcomplicated or incomplete on the site,
upvoted 4 times