Free FCSS-SDW-AR-7-4 Fortinet FCSS-SDW-AR-7-4 Practice Test Question - Page 2

Question 4 (Topic 1)

You have configured the performance SLA with the probe mode as Prefer Passive. What are two observable impacts of this configuration? (Choose two.)

Select an option, then click Submit answer.

○ FortiGate passively monitors the member if TCP traffic is passing through the member.
○ After FortiGate switches to active mode, the SLA performance rule falls back to passive monitoring after 3 minutes.
○ FortiGate passively monitors the member if ICMP traffic is passing through the member.
○ During passive monitoring, the SLA performance rule cannot detect dead members.
○ FortiGate can offload the traffic that is subject to passive monitoring to hardware.

Reference / correct answer:

FortiGate passively monitors the member if TCP traffic is passing through the member.

Most accepted answer: A. FortiGate passively monitors the member if TCP traffic is passing through the member.

Community votes: A=3, D=3

Selected Answer: AD AD are correct. From Page 138 of SD-WAN 7.4 Architect: A - "In prefer passive monitoring, FortiGate uses passive monitoring if there is TCP traffic through the member..." D - "Note that changes in member state are detected only when FortiGate is doing active monitoring..." B is incorrect - there is a 3-minute timer to trigger active mode if TCP traffic is not observed, but if in active mode, it falls back to passive mode immediately once recognizing that traffic is passing through the member. C - FortiGate does not use ICMP for passive monitoring E - FortiGate CANNOT offload traffic that is associated with a member in passive monitoring mode - auto-asic-offload must be disabled on associated firewall policies. upvoted 4 times

Selected Answer: AD The correct answers are: A. FortiGate passively monitors the member if TCP traffic is passing through the member. D. During passive monitoring, the SLA performance rule cannot detect dead members. 🔹 Why A is correct In Prefer Passive mode, FortiGate doesn’t send active probes (ICMP, UDP, HTTP) unless needed. Instead, it extracts performance metrics from live traffic. Supported protocols for passive monitoring are TCP/UDP sessions (e.g., measuring latency/jitter from sequence numbers and acknowledgments). 🔹 Why D is correct Passive mode can only measure if user traffic exists. If no user traffic passes through that link, FortiGate cannot tell whether the link is dead or just idle. Therefore, SLA cannot detect member “dead” status in passive mode — only active probing can. ❌ Why the others are wrong B: No fixed “3-minute fallback” — fallback depends on SLA thresholds and lack of traffic, not a timer. C: Passive monitoring does not use ICMP pings; ICMP-based checks require active probes. E: Hardware offload has nothing to do with passive SLA monitoring. upvoted 2 times

Selected Answer: AD I think AD are correct upvoted 2 times

Question 5 (Topic 1)

Refer to the exhibit. Which two conclusions can you draw from the output shown? (Choose two.)

Select an option, then click Submit answer.

○ One SD-WAN rule is defined with application categories as the destination.
○ UDP traffic destined to the subnet 10.22.0.0/24 matches a manual SD-WAN rule.
○ One SD-WAN rule allows traffic load balancing.
○ UDP traffic destined to the subnet 10.22.0.0/24 matches a policy route.

Question 6 (Topic 1)

You used the HUB IPsec_Recommended and the BRANCH IPsec_Recommended templates to define the overlay topology. Then, you used the SD-WAN template to define the SD- WAN members, rules, and performance SLAs. You applied the changes to the devices and want to use the FortiManager monitors menu to get a graphical view that shows the status of each SD-WAN member. Which statement best explains how to obtain this graphical view?

Select an option, then click Submit answer.

○ Use the SD-WAN monitor template view to get a map view of the branches, hub, and tunnel status, including the SLA pass or missed status.
○ Use the SD-WAN monitor table view to get a donut view and a table view that shows the status of each SD-WAN member, including the SLA pass or missed status.
○ Use the VPN monitor map view to get a map view of the branches, hub, and tunnel status, including the SLA pass or missed status.
○ Use the SD-WAN monitor asset view to get a donut view and a table view that shows the status of each device and the SLA status of each SD-WAN member.

Free FCSS-SDW-AR-7-4 – Fortinet FCSS-SDW-AR-7-4 Practice Test Question