the corporate server 10.2.5.254?

You want to configure SD-WAN on a network as shown in the exhibit.

The network contains many FortiGate devices. Some are used as NGFW, and some are installed with

extensions such as FortiSwitch. FortiAP. or Forti Ex tender.

What should you consider when planning your deployment?

Based on the output shown in the exhibit, what can you say about the tunnels on this device?

ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD-WAN

hub.

Which overlay routing configuration should you use?

the LAN subnet and its IP address is 10.0.1.101.

Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit.

- Two regions

- Most of the traffic is expected to remain within its region

- No requirement for inter-region ADVPN

To remain within the recommended best practices, which routing protocol should you select for the

overlays?

each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You

want to delete it.

What happens if you delete the SD-WAN member from the FortiGate GUI?

What should you do to implement ADVPN 2.0 in this scenario?

The administrator analyzed the traffic between a branch FortiGate and the server located in the data

center, and noticed the behavior shown in the diagram.

When the LAN clients located behind FGT1 establish a session to a server behind DC-1, the

administrator observes that, on DC-1, the reply traffic is routed overT2. even though T1 is the preferred

member in the matching SD-WAN rule.

What can the administrator do to instruct DC-1 to route the reply traffic through the member with the best

performance?

and Hub 2

Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the

spoke B2? (Choose two.)

Which three tasks can you do in advance to simplify this deployment? (Choose three.)

The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in

exhibit.

Based on the configuration, which three conclusions can you draw about the characteristics and

requirements of the VPN tunnel? (Choose three.)

The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table

on FortiGate.

The administrator increases the member priority on port2 to 20.

Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform

on existing sessions established over port2? (Choose two.)

Facebook and YouTube along with the firewall policy configuration and the underlay zone status.

Which two statements are true about the health and performance of SD-WAN members 3 and 4?

(Choose two.)

exhibit.

Based on the configuration, which three conclusions can you draw about the characteristics and

requirements of the VPN tunnel? (Choose three.)

An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor

menus. All members are configured with one or two SLAs.

Which two conclusions can you draw from the output shown? (Choose two.)