Cloud On-Ramp and Traffic Steering with FortiGate

Play an AI-generated podcast conversation about this lesson

Which device on site 1 has a direct tunnel against a FortiGate VM running on the cloud?

FortiGate device on site4
FortiGate device on site2
FortiGate device on site3
FortiGate device on site1 (correct)

What is the purpose of the tunnel between the FortiGate device on site 1 and the FortiGate VM in the cloud?

To send traffic to cloud applications through the hub
To optimize configuration and allow for segmentation
To steer traffic of cloud applications for performance and security reasons (correct)
To integrate FortiSASE with the SD-WAN

Which device on site 2 uses an overlay to the hub to send traffic to cloud applications?

FortiGate device on site2 (correct)
FortiGate device on site3
FortiGate device on site1
FortiGate device on site4

What is the purpose of the hub in the SD-WAN architecture?

To send traffic to cloud applications through the hub (C) Signup and view all the answers

What are members in the context of SD-WAN?

Physical or logical interfaces used to steer traffic (D) Signup and view all the answers

What are zones in the context of SD-WAN?

Logical groupings of members (B) Signup and view all the answers

What is the purpose of assigning members to zones in SD-WAN?

To optimize configuration and allow for segmentation (D) Signup and view all the answers

When configuring a member in SD-WAN, what must be assigned to it?

A zone and a gateway (C) Signup and view all the answers

When were zones introduced in FortiOS?

6.4.1 and 7.0.0 (C) Signup and view all the answers

How many default zones are created in SD-WAN?

2 (A) Signup and view all the answers

Which zone is used when you upgrade a FortiGate device running a version with no support for zones to a version that supports zones?

Virtual-wan-link (D) Signup and view all the answers

What is FortiSASE?

A cloud-delivered secure access service edge (C) Signup and view all the answers

What is the purpose of the underlay zone?

It is used for a basic DIA setup (A) Signup and view all the answers

What does FortiGate monitor for each SD-WAN member in the Performance SLAs page?

State, packet loss, latency, and jitter (A) Signup and view all the answers

What can SD-WAN use the member health information for?

Traffic steering decisions (D) Signup and view all the answers

What are the two types of health monitoring for SD-WAN members?

Active and passive (D) Signup and view all the answers

What is active monitoring in SD-WAN health monitoring?

Checking member health by periodically sending probes (C) Signup and view all the answers

What is passive monitoring in SD-WAN health monitoring?

Determining member health based on member traffic (A) Signup and view all the answers

What are the default entries used for measuring member health in SD-WAN performance SLAs?

Well-known internet services like FortiGuard, Google Search, and Amazon AWS (A) Signup and view all the answers

What does the Level3_DNS entry in SD-WAN performance SLAs monitor?

The health of port1 and port2 using the 4.2.2.1 and 4.2.2.2 DNS servers (D) Signup and view all the answers