An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)

• A. You can select the outbandwidth hash mode with all strategies that allow load balancing.
• B. Only the manual and best-quality strategies allow SD-WAN load balancing.
• C. When applicable. FortiGate load balances the traffic through all members that meet the SLA target.
• D. SD-WAN load balancing is possible only using the best quality and lowest cost (SLA) strategies.

Refer to the exhibits.


The exhibits show the SD-WAN zone configuration of an SD-WAN template prepared on FortiManager and the policy package configuration.
When the administrator tries to install the configuration changes, FortiManager fails to commit.
What should the administrator do to fix the issue?

• A. Configure both HUB1-VPN1 and HUB1-VPN2 as the destination of policy 3
• B. Configure branch1_fgt as the installation target for policy 3.
• C. Configure HUB1 as the destination of policy 3.
• D. Configure a normalized interface for the IPsec tunnel HUB1-VPN1.

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit. After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

• A. The session 3-tuple did not match any of the existing entries in the ISDB application cache.
• B. FortiGate could not refresh the routing information on the session after the application was detected.
• C. No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting
• D. Full SSL inspection is not enabled on the matching firewall policy.

Refer to the exhibits, which show the configuration of an SD-WAN rule and the corresponding rule status and routing table.


The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

• A. The traffic will be routed over HUB1-VPN2
• B. The traffic will be routed over HUB1-VPN1.
• C. The traffic will be load balanced across all three overlays
• D. The traffic will be routed over HUB1-VPN3.

Refer to the exhibit.

The exhibit shows output of the command diagnose sys adwan aervice4 collected on a FortiGate device.
The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook.
Based on the exhibits, which two statements are correct? (Choose two.)

• A. When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1. HQ_T2. HQ_T3.
• B. When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.
• C. There is no service defined for the Facebook application, so FortiGate appliesservice rule 3 and directs the traffic to headquarters.
• D. FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.