What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.) The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. Re

Refer to the exhibits.Exhibit A Exhibit B Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

Refer to the exhibits.Exhibit A Exhibit B Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.If port2 is detected dead by FortiGate, what is the expected behavior?

Refer to the exhibits.Exhibit A Exhibit B Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

Which type statements about the SD-WAN members are true? (Choose two.) SD-WAN members can be manually ordered by changing their sequence number (A), which allows administrators to prioritize the interfaces according to the routing requirements. Also, VLAN interfaces can be used as SD-WAN members (C), providing flexibility in network design and the use of existing VLAN infrastructure within the SD-WAN setup.

Refer to the exhibit.Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

Refer to the exhibit.Based on the output, which two conclusions are true? (Choose two.)

Refer to the exhibit. Which conclusion about the packet debug flow output is correct?

Refer to the exhibit.What must you configure to enable ADVPN?

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. Based on the exhibit, which statement is true? Based on the exhibit, the 'corporate' zone contains no member (B). In the FortiGate GUI, zones without members do not display any interfaces listed under them, which is the case for the corporate zone in the exhibit. Reference: This conclusion is based on standard Fortinet GUI interpretation and the operational logic of SD-WAN zones as per Fortinet's guidelines and user interf

Which two tasks are part of using central VPN management? (Choose two.)

Refer to the exhibit.Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Refer to the exhibits.Exhibit A Exhibit B Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage ofavailable bandwidth?

The administrator uses the FortiManager SD-WAN overlay template to prepare an SD-WAN deployment. With information provided through the SD-WAN overlay template wizard, FortiManager creates templates ready to install on spoke and hub devices. Select three templates created by the SD-WAN overlay template for a spoke device. (Choose three.) In a FortiManager SD-WAN overlay template configuration for a spoke device, the system template (A) is created to provide basic device settings. The IPsec tunnel template (C

Refer to exhibits.Exhibit A.Exhibit B.Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of theparticipating SD-WAN members.Based on the exhibits, which statement is correct?

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

An administrator is troubleshooting VoIP quality issues that occur when calling external phonenumbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and isusing two upstream links One link has random jitter and latency issues and is based on a wirelessconnectionWhich two actions must the administrator apply simultaneously on the edge FortiGate to improveVoIP quality using SD_WAN rules?

What are the two minimum configuration requirements for an outgoing interface to be selected oncethe SD-WAN logical interface is enabled? (Choose two )

Refer to the exhibit. Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)

Refer to the exhibit.Which statement about the command route-tag in the SD-WAN rule is true?

Refer to the exhibit.Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)