Central Management

When using SD-WAN templates, how are SD-WAN rules ordered?

In SD-WAN central management, what is the 'SD-WAN Zone' used for?

You are troubleshooting a scenario where an SD-WAN template is not pushing to a FortiGate. Which log file on the FortiManager is most useful to identify the specific CLI command causing the failure?

When creating an SD-WAN template, what must be defined before you can add an SD-WAN interface to the template?

Which object must be created before assigning a health check to an SD-WAN service rule in an SD-WAN template?

You are configuring SD-WAN templates in FortiManager. What is the primary purpose of using SD-WAN Central Management instead of configuring SD-WAN directly on individual FortiGates?

How do you apply an SD-WAN template to multiple managed FortiGates simultaneously?

What happens if you modify an SD-WAN template that is already applied to a FortiGate?

You want to standardize the SD-WAN configuration for 50 remote branch offices. Which FortiManager feature should you use?

During SD-WAN template deployment, what is the role of 'Dynamic Mapping'?

If an SD-WAN template contains a reference to an interface that does not exist on a target FortiGate, what occurs during the installation process?

When configuring SD-WAN in FortiManager, why would you use 'Shared Objects'?

When viewing the SD-WAN Monitor in FortiManager, what information is provided for the 'Health Check' status?

What is required before FortiManager can display SD-WAN monitoring data?

When configuring SD-WAN services in a template, what does the 'Performance SLA' setting determine?

Which interface can be used as an SD-WAN member in an SD-WAN template?

You have a large SD-WAN deployment. Why would you use a 'Centralized Policy' in FortiManager instead of local policies?

If you modify a shared SD-WAN health check object that is referenced by ten different templates, what happens to the FortiGates?

Which TWO of the following are benefits of using SD-WAN templates in FortiManager?

How can you verify that an SD-WAN configuration change was successfully applied to a FortiGate via FortiManager?

Which THREE tasks are required to successfully deploy SD-WAN via FortiManager?

Which TWO items must be configured within an SD-WAN template for SD-WAN traffic steering to work?

Which THREE pieces of information are displayed in the SD-WAN Monitor in FortiManager?

Which THREE factors can affect the 'Performance SLA' logic in an SD-WAN template?

Which TWO methods can be used to update SD-WAN policies across all managed devices in FortiManager?

Which TWO criteria can be used in SD-WAN rules to select an outgoing interface?

Which TWO configuration changes require a push from FortiManager to the FortiGate?

A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to define a health check that will be used across several SD-WAN templates and needs to ensure that any changes to this health check are automatically propagated to all templates that reference it. Which FortiManager object should the administrator create?

An administrator has an SD-WAN template in FortiManager that is assigned to a managed FortiGate. The FortiGate is currently offline. The administrator modifies the template and installs the configuration. What happens to the FortiGate when it comes back online?

A company uses FortiManager to manage 200 FortiGates with SD-WAN enabled. The administrator needs to update the SD-WAN health check settings for all branches to use a new server IP. The health check is referenced by a single SD-WAN template that is assigned to all branches. After modifying the health check object in FortiManager, what must the administrator do to apply the changes to all FortiGates?

An administrator is configuring an SD-WAN template in FortiManager for a new branch deployment. The template will include multiple SD-WAN members and a performance SLA that monitors the health of these members. Which two statements about the relationship between SD-WAN templates and health check objects are true? (Choose two.)

A network engineer is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific SD-WAN rule is only applied to branch offices that have a specific tag. Which FortiManager feature should they use?

A network engineer is creating a new SD-WAN template in FortiManager. The template will be used to configure SD-WAN on several FortiGate devices. The engineer wants to define a health check that monitors the latency to a specific server using ICMP. Which configuration object should the engineer create first?

An administrator is troubleshooting an SD-WAN template deployment in FortiManager. The template fails to install on a managed FortiGate. Which two actions should the administrator take to identify the cause? (Choose two.)

A network administrator is using FortiManager to manage a large SD-WAN deployment. They need to create a new SD-WAN template that will be applied to multiple FortiGates. The administrator wants to ensure that the template can be easily modified in the future without having to manually update each device. Which FortiManager object should they use to define the SD-WAN template?

A company has an SD-WAN template in FortiManager that is assigned to 50 FortiGates. The template includes a health check object named 'HC1' that monitors a server at 10.0.0.1. The administrator modifies 'HC1' to monitor 10.0.0.2 instead. After the change, the administrator notices that some FortiGates still show the old server IP in their running configuration. What is the most likely reason for this discrepancy?

An administrator is configuring an SD-WAN template in FortiManager. They want to ensure that the template can be applied to FortiGates with different interface names. Which feature in FortiManager allows mapping template interface references to actual device interfaces?

A network engineer is configuring an SD-WAN template in FortiManager. They want to define a performance SLA that monitors the quality of two WAN links using HTTP probes to a specific server. Which FortiManager object should they configure to define the HTTP probe parameters?

A network administrator at a large enterprise uses FortiManager to manage 120 FortiGates. The security team wants to enforce a consistent SD-WAN configuration across all branches, but the branches have different WAN link counts and interface names. The administrator wants to avoid manually editing each device's configuration. Which FortiManager feature should the administrator use to create a reusable SD-WAN configuration that can adapt to each device's interface names?

An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator modifies the template by adding a new SD-WAN zone and a new performance SLA. What happens when the administrator installs the modified template to the FortiGate?

An administrator is reviewing the SD-WAN configuration in FortiManager after applying a template to several FortiGates. They notice that one FortiGate has a different SD-WAN rule order than the others. What is the most likely reason for this discrepancy?

An administrator has an SD-WAN template applied to 30 FortiGates via FortiManager. The template includes a performance SLA named 'Critical_SLA' that monitors two WAN links. The administrator needs to change the SLA's probe interval from 500ms to 1000ms without affecting other settings. After modifying the template, what must the administrator do to propagate the change to all managed FortiGates?

An administrator is configuring an SD-WAN template in FortiManager for a hub-and-spoke topology. The administrator wants to ensure that the SD-WAN rules can dynamically select the best path based on performance. Which two components must be configured within the SD-WAN template to achieve this? (Choose two.)

A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. They notice that a specific SD-WAN rule is not being enforced on a FortiGate, even though the template was installed successfully. The rule uses a performance SLA to select the best path. What is the most likely cause?

A network engineer is configuring an SD-WAN template in FortiManager for a new branch office. The branch has two internet links: one via DHCP and one via static IP. The engineer wants to ensure that the SD-WAN rule prefers the static link for business-critical traffic but can fail over to the DHCP link if the static link's performance degrades. Which SD-WAN template component should the engineer configure to define the performance thresholds that trigger failover?

A network administrator manages 30 FortiGate devices in FortiManager. The administrator wants to ensure that all devices use the same SD-WAN health check settings for a specific SLA target. Which FortiManager object should the administrator configure to achieve this?

A network administrator manages 80 FortiGate devices in FortiManager. The company wants to ensure that all devices use the same SD-WAN health check settings for a critical business application, but each device has a different WAN IP address. Which FortiManager feature should the administrator use to meet this requirement?

A company uses FortiManager to manage 100 FortiGates. They have an SD-WAN template applied to all devices. The administrator modifies a health check within the template to change the probe interval from 500ms to 1000ms. After saving the template, they want to push the change to all managed FortiGates. What must the administrator do to ensure the updated health check is applied to all devices?

An administrator has created an SD-WAN template in FortiManager and applied it to a group of FortiGates. Later, they need to modify the template to add a new health check. What is the most efficient way to update all managed devices with this change?

An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator needs to add a new VLAN interface as an SD-WAN member. Where should this change be made to ensure it is reflected in the FortiManager-managed configuration?

A company uses FortiManager to manage SD-WAN configurations for 50 branch offices. The administrator needs to update the SD-WAN rules across all branches to include a new application category for SaaS traffic. The update must be applied consistently and with minimal administrative effort. Which two actions should the administrator take to achieve this? (Choose two.)

An administrator is using FortiManager 7.2 to manage SD-WAN templates across 150 FortiGates. They need to ensure that when a template is updated, the changes are propagated efficiently and that the FortiGates maintain high availability. The administrator wants to use the 'Install Wizard' to push the updated template. Which two statements are true about installing an SD-WAN template with the Install Wizard in this scenario? (Choose two.)

A network administrator is configuring an SD-WAN template in FortiManager. The template includes multiple SD-WAN rules that reference different Performance SLAs. The administrator wants to ensure that if a link fails an SLA, traffic is automatically routed to another link that meets the SLA. Which SD-WAN rule strategy should be used to achieve this?

A network administrator is managing an SD-WAN deployment with multiple FortiGates using FortiManager. The administrator needs to ensure that all SD-WAN health checks are consistent across all devices and that any changes to the health check parameters are automatically propagated. Which FortiManager object should the administrator use to achieve this?

A network administrator is using FortiManager to manage an SD-WAN deployment. They want to create a new SD-WAN template that includes a health check for the 'MPLS' interface. Where in the FortiManager GUI should the administrator navigate to create this template?

An administrator is using FortiManager to manage an SD-WAN deployment with 80 FortiGates. The SD-WAN template includes a health check that pings the destination '8.8.8.8' every 500ms. The administrator notices that some branches have high latency to that destination, causing unnecessary failovers. The administrator wants to change the health check destination to a regional server with lower latency for each branch. However, the branches are in different geographic regions. What is the most efficient way to customize the health check destination per region without creating multiple templates?

An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for packet loss. Which FortiManager object must be referenced in the SD-WAN template to define these health checks?

A network engineer is using FortiManager to manage a FortiGate that already has a local SD-WAN configuration. The engineer wants to transition to centralized management by assigning an SD-WAN template to the device. After the template is assigned and installed, what is the effect on the existing local SD-WAN settings?

A network engineer is creating an SD-WAN template in FortiManager. They want to define a health check that monitors the quality of an internet link by sending HTTP requests to a specific URL. Which configuration element in the SD-WAN template should they use to accomplish this?

A network administrator is managing a FortiManager that has provisioned an SD-WAN template to a group of managed FortiGates. The administrator needs to verify that each FortiGate is actually running the intended SD-WAN configuration and that no device is out of sync. Which FortiManager workflow should the administrator use to compare the intended SD-WAN template configuration against the running configuration on each managed device?

An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for jitter. The administrator wants the SD-WAN rule to select the member with the lowest latency. Which FortiManager configuration element must be used to achieve this?

An administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. They need to update the SD-WAN template to change the health check target for all devices. After modifying the template, they want to ensure the changes are pushed to all managed FortiGates efficiently. Which action should they take in FortiManager?

An administrator is using FortiManager to deploy an SD-WAN configuration to a new FortiGate. The administrator wants to ensure that the SD-WAN member interfaces are correctly associated with the physical interfaces on the device. Which FortiManager feature allows the administrator to define the mapping between logical SD-WAN interfaces and physical interfaces?

A network engineer is configuring an SD-WAN template in FortiManager for a group of branch FortiGates. The engineer needs to define health checks that monitor the performance of WAN links. Which two health check protocols are supported in FortiManager SD-WAN templates? (Choose two.)

An administrator is creating an SD-WAN template in FortiManager and needs to define the member interfaces. Which FortiManager object is used to group these interfaces for the SD-WAN configuration?

An administrator needs to deploy an SD-WAN template to a FortiGate that has two WAN interfaces: wan1 and wan2. The template includes an SD-WAN rule that load-balances traffic across both interfaces. During installation, the administrator receives an error that the interface mapping is incomplete. What is the most likely cause?

A network administrator is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific health check, which monitors a critical cloud application, is used by all SD-WAN rules across all templates. What is the most efficient way to achieve this in FortiManager?

An administrator is creating an SD-WAN template in FortiManager to be applied to multiple FortiGate devices. The administrator wants to ensure that the template can be reused across devices with different WAN interface names. Which configuration element in the SD-WAN template allows the use of variables for interface names?

An administrator is configuring an SD-WAN template in FortiManager. The template will be used to deploy SD-WAN to multiple branch FortiGates. Which two statements about SD-WAN templates in FortiManager are true? (Choose two.)

A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. The administrator notices that after installing an SD-WAN template, some FortiGates are not using the expected health check server. The administrator verifies that the template is correctly configured with the health check server IP. What is the most likely cause for the discrepancy?

An administrator is creating an SD-WAN template in FortiManager. The template will be used to provision multiple FortiGates. The administrator wants to define a health check that uses ICMP probes to monitor the primary WAN link. Which FortiManager object must be configured within the SD-WAN template to achieve this?

An administrator is configuring an SD-WAN template in FortiManager. The template includes multiple health checks that monitor the performance of different WAN links. The administrator wants to ensure that if a health check fails, the SD-WAN rule automatically redirects traffic to another member. Which component of the SD-WAN template is responsible for defining the action taken when a health check fails?

An administrator is using FortiManager to manage an SD-WAN deployment. The administrator needs to add a new SD-WAN member to an existing template that is already assigned to 20 FortiGates. After modifying the template, what must the administrator do to apply the change to all managed devices?

A network administrator is using FortiManager to manage a large SD-WAN deployment. The administrator needs to create a new SD-WAN template that will be used by several FortiGates. The template must include a health check that uses HTTP to monitor a specific server. Which FortiManager object type should the administrator configure first to define the HTTP health check before adding it to the SD-WAN template?

An administrator has an SD-WAN template in FortiManager that is already assigned to a managed FortiGate. The administrator edits the template to change the SD-WAN zone membership of an interface from 'virtual-wan-link' to a custom zone named 'overlay'. After saving the template, what must the administrator do to push this change to the FortiGate?

A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to ensure that all devices use the same health check server IP address for their SD-WAN performance SLAs. Where in FortiManager should the administrator define this shared health check server?

An administrator has created an SD-WAN template in FortiManager and applied it to a FortiGate. The administrator then modifies the template to add a new SD-WAN rule that directs traffic from a specific subnet to a new overlay interface. After installing the policy package, the administrator notices that the rule is not taking effect on the FortiGate. What is the most likely reason?

An administrator has just created an SD-WAN template in FortiManager and assigned it to a policy package for 30 branch FortiGates. Before installing, the administrator wants to verify how the SD-WAN members, zones, and performance SLA settings will look on a specific FortiGate without affecting the production configuration. Which FortiManager feature should the administrator use?