FCSS_SDW_AR-7.4 : BUNDLE PACK LEARNING TOOLS INCLUDED

Certification
This exam is part of the following certification tracks:
* Fortinet Certified Solution Specialist - Network Security: This certification validates your ability to design, administer, monitor, and troubleshoot Fortinet network security solutions.
* Fortinet Certified Solution Specalist - Secure Access Service Edge: This FCSS - SASE certification validates your ability to design, administer, monitor, and troubleshoot Fortinet SASE solutions.

Visit the Cybersecurity Certification page for information about certification requirements.

Exam
The FCSS - FCSS - SD-WAN 7.4 Architect exam evaluates your knowledge of, and expertise with, the Fortinet SD-WAN solution.
This exam tests your applied knowledge of the integration, administration, troubleshooting, and central management of a secure
SD-WAN solution composed of FortiOS 7.4.4, FortiManager 7.4.5, and FortiAnalyzer 7.4.5.
Once you pass the exam, you will receive the following exam badge:

Audience
The FCSS - FCSS - SD-WAN 7.4 Architect exam is intended for network and security professionals who are responsible for the design, administration, and support of a secure SD-WAN infrastructure composed of many FortiGate devices.

Exam Details
Exam name FCSS - SD-WAN 7.4 Architect
Exam series FCSS_SDW-7.4-AR
Time allowed 75 minutes
Exam questions 38 multiple-choice questions
Scoring Pass or fail. A score report is available from your Pearson VUE account.
Language English, Japanese
Product version FortiOS 7.4, FortiManager 7.4

Exam Topics
Successful candidates have applied knowledge and skills in the following areas and tasks:
* SD-WAN configuration
* Configure a basic SD-WAN setup
* Configure SD-WAN members and zones
* Configure performances SLAs
* Rules and Rrouting
* Configure SD-WAN rules
* Configure SD-WAN routing
* Centralized management
* Deploy SD-WAN from FortiManager
* Implement the branch configuration deployment
* Use the SD-WAN overlay template
* Advanced IPsec
* Deploy a hub-and-spoke IPsec topology for SD-WAN
* Configure ADVPN
* Configure IPsec multihub, mulitiregion, and large deployments
* SD-WAN troubleshooting
* Troubleshoot SD-WAN rules and sessions behavior
* Troubleshoot SD-WAN routing
* Troubleshoot ADVPN

Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to
have hands-on experience with the exam topics and objectives.
* FCSS - SD-WAN 7.4 course and hands-on labs
* FCP - FortiGate Administrator 7.4 course and hands-on labs
* FCP - FortiManager Administrator 7.4 course and hands-on labs
* FortiOS 7.4—Administration Guide
* FortiOS 7.4—CLI Reference
* FortiManager 7.4—Administration Guide

Experience
* 3 years of experience with networking and network security
* 2 years of experience with FortiGate and FortiManager
 

Exam Sample Questions

QUESTION 1
Exhibit.
Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

A. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.
B. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.
C. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.
D. On hubs, auto-diacovery-sender must be enabled on the IPsec VPNs to spokes

Answer: A, D

QUESTION 2
Refer to the exhibit.
Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0 to the corporate server 10.2.5.254?

A. SD-WAN service rule 3 and interface HUB1-VPN2.
B. SD-WAN service rule 3 and interface HUB1-VPN3.
C. SD-WAN service rule 4 and port1 or port2.
D. SD-WAN service rule 4 and interface port2.

Answer: B

QUESTION 3
Refer to the exhibit.
Refer to the exhibit.
You want to configure SD-WAN on a network as shown in the exhibit.
The network contains many FortiGate devices. Some are used as NGFW, and some are installed with
extensions such as FortiSwitch. FortiAP. or Forti Ex tender.
What should you consider when planning your deployment?

A. You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with Forti Extender.
B. You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.
C. You must use FortiManager to manage your SD-WAN topology.
D. You must build multiple SD-WAN topologies. Each topology must contain only one type of extension.

Answer: B

QUESTION 4
Refer to the exhibit.
Refer to the exhibit that shows event logs on FortiGate.
Based on the output shown in the exhibit, what can you say about the tunnels on this device?

A. The master tunnel HU82-VPN3 cannot accept ADVPN shortcuts.
B. The device steers voice traffic through the VPN tunnel HUB1-VPN3.
C. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.
D. There is one shortcut tunnel built from master tunnel VPN4.

Answer: B

QUESTION 5
Exhibit.
Which action will FortiGate take if it detects SD-WAN members as dead?

A. FoftiGate bounces port5 after it detects all SD-WAN members as dead.
B. FortiGate fails over to the secondary device after it detects port5 as dead.
C. FortiGate sends alert messages through poft5 when it detects all SD-WAN members as dead
D. FortiGate brings down port5 after it detects all SD-WAN members as dead.

Answer: D