FCSS – SD-WAN Architect 7.4 — Question 63

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule.
What could be a possible cause of the traffic interruption?

Answer options

• A. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members.
• B. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN.
• C. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration.
• D. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration.

Correct answer: B

Explanation

The correct answer is B because when an SD-WAN member is deleted, FortiGate can remove static routes that were associated with that interface, leading to traffic interruption. Option A is incorrect as FortiGate can still route traffic through non-SD-WAN member interfaces. Option C is not accurate because layer 3 settings are not automatically removed when an interface is excluded from SD-WAN. Option D is also wrong since interfaces are not brought down administratively just because they are removed from SD-WAN.