View all questions & answers for the FCSS - SD-WAN 7.4 Architect Exam Materials exam


Question 17 Discussion

An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as shown in the exhibit. The GUI page shows no option to configure an application as the destination of the SD-WAN rule. Why? (Choose one answer)

  • A. You cannot use applications as the destination when FortiGate is used for a DIA setup.
  • B. You must enable the feature on the CLI.
  • C. You must enable the feature first using the GUI menu System > Feature Visibility.
  • D. FortiGate allows the configuration of applications as the destination of SD-WAN rules only on the CLI.
Correct Answer: C

Brave-Dump Clients Votes

C 50%
B 50%

Comments



Brave-Dumps Admin 2025-06-12 13:34:18

Selected Answers: C


As per FCSS - SD-WAN 7.4 Architect Study Guide page: 213

Mbuh Mbuh 2025-06-25 02:37:58

Selected Answers: B


I think it is B. from Page 213 of study Guide.
The Application setting is always visible on the FortiManager menu. However, if you decide to configure SD-WAN rules directly from the FortiGate GUI, you need to enable GUI visibility for application with the CLI commands "set gui-app-detection-sdwan enable"

Brave-Dumps Admin 2025-06-25 12:32:59

Selected Answers: C


Dear Mbuh,
From FortiGate v7.2 and above versions we can enable application detection as criteria in SD-WAN rules in GUI and CLI

GUI:
go to System -> Feature Visibility and enable Application Detection Based SD-WAN.

CLI:
config system global
set gui-app-detection-sdwan enable
end

I think as long as the feature is available in the GUI, it should be considered the primary method. The CLI should only be used if it is not accessible through the GUI.
  • Jim Abshire 2025-10-15 16:26:54
    I agree with your assessment, however, if what you say is accurate the Study Guide should reflect the same, and it doesn't. It specifically states use CLI from Fortigate device. Any chance you can check with Fortinet directly so we can clear this up? I would like to get all questions correct.

007user 2025-07-15 04:58:11

Selected Answers: B


For the Fortigate, you need to enable GUI visibility for application detection with CLI commands. The question is clear when asks about Fortigate GUI, not about Fortimanager. Study guide p. 213. B is the correct answer.
  • Brave-Dumps Admin 2025-07-16 20:16:16
    The question doesn't mention FortiGate or FortiManager, but the image attached in the question is from a FortiGate device, so it should be C.
  • Jim Abshire 2025-10-16 16:36:26
    Yes it does, the question starts out with, see below, it says from the Fortigate GUI. "An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI"
  • Jim Abshire 2025-10-16 16:36:31
    Yes it does, the question starts out with, see below, it says from the Fortigate GUI. "An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI"

Elrasheed 2025-07-19 12:22:23

Selected Answers: C


C is correct I checked it in the FortiGate GUI

Raghdan Riyadh 2025-07-24 19:02:28

Selected Answers: C


To configure application categories as an SD-WAN rule destination in the GUI:
Note
This functionality is available in FortiOS 7.2.1 and later. Prior to 7.2.1, individual applications can be selected in SD-WAN rules by default.

After upgrading to 7.2.1 or later, the GUI functionality is available if applications are already configured in SD-WAN rules prior to upgrading. Otherwise, by default, individual applications and application groups cannot be selected in SD-WAN rules. To enable this functionality, see step 1 in the following procedure.

Enable the feature visibility:
Go to System > Feature Visibility.
In the Additional Features section, enable Application Detection Based SD-WAN.
Click Apply.


Note
To enable GUI visibility of application detection based SD-WAN in the CLI:
config system global
set gui-app-detection-sdwan enable
end

Raghdan Riyadh 2025-07-24 19:04:58

Selected Answers: C


I have a Fortigate running in production with the 7.4.7 version. I’ve already checked it.

NOTE: Some people may not find the feature there because they are in the root vdom. You need to be in the Global vdom.

Daniel 2025-10-06 14:41:06

Selected Answers: B


It`s B, page 213, ONLY VISIBLE AFTER CLI ACTIVATION

Jim Abshire 2025-10-13 23:27:17

Selected Answers: B


I'm picking B because the question is clear, using the Fortigate GUI, not Fortimanager, I realize running version 7.4, which is what I am running, you can choose the option in the GUI, however, the study guide specifically says using Fortigate, you must enable from the CLI.
  • Jim Abshire 2025-10-14 16:00:17
    BTW, I checked my configuration via CLI and the set gui-app-detection-sdwan is set to enable. I don't recall doing it.
  • Jim Abshire 2025-10-14 16:04:00
    BTW, I checked my configuration via CLI and the set gui-app-detection-sdwan is set to enable. I don't recall doing it. I changed it to disable and all it did was disable from the GUI, the option is still there and I just clicked to enable it.

Jim Abshire 2025-10-14 15:54:47

Selected Answers: B


I have to go with B on this one as the study guide is clear on it. However, it is confusing as I am running 7.4 and the option to enable via the GUI is available, not sure why this has to be so confusing.

FortiGate accepts the deletion and removes routes as required.