Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Solution Specialist: SD-WAN 7.6 Enterprise Architect · Fortinet
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Why D is correct: ADVPN 2.0 shifts the intelligence for edge discovery and path management away from the hub and directly onto the spokes (branches) . Because the underlying IPsec tunneling mechanisms remain similar to legacy ADVPN, you implement ADVPN 2.0 by updating the SD-WAN configuration on the branches. Specifically, you must enable advpn-select enable at the SD-WAN zone level and define a transport-group for each participating SD-WAN member interface so the spoke knows which underlays are compatible for building shortcuts
To implement ADVPN 2.0 on an SD-WAN topology that is already using ADVPN, you should update the SD-WAN configuration on the branch/spoke FortiGates—not rebuild the VPNs or change only the hub IPsec tunnel settings. ADVPN 2.0 moves the new intelligence for edge discovery and path management to the spokes, where shortcut selection is made using local and remote link health plus SD-WAN rule logic.