Fortinet NSE7_SSE_AR-26 Value Pack (Frequently Bought Together)

Refer to the exhibit. The administrator configured the SD-WAN rule ID 4 with two members (port1 and port2) and strategy lowest cost (SLA). What are the two characteristics of the session shown in the exhibit?
(Choose two.)

Exhibit 1

• A. FortiGate will re-evaluate this session if the outgoing interface goes down.
• B. FortiGate steered this flow according to an SD-WAN rule 4.
• C. FortiGate steered this flow according to the application detected and the outgoing interface is port3.
• D. FortiGate will never re-evaluate this session.

Refer to the exhibit.

How does FortiGate handle the ICMP traffic with the source IP address 10.0.1.125 and the destination IP address 128.66.0.125?

• A. FortiGate load balances the traffic flow through port7 and port8.
• B. FortiGate routes the traffic flow according to the forwarding information base (FIB).
• C. FortiGate drops the traffic flow.
• D. FortiGate steers the traffic flow through port2.

As an MSSP administrator, you are asked to configure ADVPN on an existing SD-WAN topology.
FortiManager manages the customer devices in a dedicated ADOM. The previous administrator used the SD- WAN overlay topology. Which two statements apply to this scenario? (Choose two.)

• A. You can activate auto-discovery VPN in the SD-WAN overlay template only if it is a single hub topology.
• B. When auto-discovery VPN is enabled, FortiManager updates the IPsec and BGP templates in the hub.
• C. After you enable auto-discovery VPN in the overlay template, you must select between ADVPN 2.0 and ADVPN 1.0.
• D. You can activate auto-discovery VPN in the SD-WAN overlay template for any type of topology, including a primary-primary dual-hub topology.

Refer to the exhibits.
The SD-WAN zones and members configuration of two branch devices are shown.
The two branch devices are part of the same hub-and-spoke topology and connect to the same hub. The devices are configured to allow auto-discovery VPN (ADVPN). The configuration on the hub allows the initial communication between the two spokes.
When traffic flows require it, between which interfaces can the devices establish shortcuts?

Exhibit - Branch-A SD-WAN zone and transport group
The visible recording shows the Branch-A configuration; the Branch-B configuration is not displayed in the captured video frame.

• A. Between T1 on Branch-A and TA on Branch-B
• B. Any interface that belongs to the same zone
• C. Any interface in the overlay zones
• D. Between T2 on Branch-A and TB on Branch-B

An organization is integrating a cloud-delivered security operations capability with its secure access service edge (SASE) architecture to enhance threat detection, investigation, and response across a distributed environment of users and endpoints. The security team is particularly focused on improving real-time threat monitoring and gaining unified visibility into security events across the infrastructure.
Which two benefits are achieved by integrating SOC-as-a-Service (SOCaaS) with FortiSASE? (Choose two.)

• A. Eliminates the need for endpoint protection software
• B. Centralized visibility into all threat events
• C. Continuous threat monitoring across all connected endpoints
• D. Provides bandwidth usage analytics