nerdexam
Fortinet

FCSS_SDW_AR-7.4 · Question #37

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the…

The correct answer is D. port2. The ping target IP 157.240.19.35 matches an App Control entry for Facebook (ID 15832). According to the diagnose firewall route list output, this application is handled by vwl_service=2 (Non-Critical-DIA), which routes traffic via oif=4 (port2). Therefore, FortiGate steers the…

SD-WAN Business Application Policies

Question

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

Exhibits

FCSS_SDW_AR-7.4 question #37 exhibit 1
FCSS_SDW_AR-7.4 question #37 exhibit 2

Options

  • Aport4
  • BHUB1-VPN1
  • Cport1
  • Dport2

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    14% (4)
  • D
    75% (21)

Explanation

The ping target IP 157.240.19.35 matches an App Control entry for Facebook (ID 15832). According to the diagnose firewall route list output, this application is handled by vwl_service=2 (Non-Critical-DIA), which routes traffic via oif=4 (port2). Therefore, FortiGate steers the Facebook test traffic through port2.

Topics

#traffic steering#branch FortiGate#SD-WAN rules#interface selection

Community Discussion

No community discussion yet for this question.

Full FCSS_SDW_AR-7.4 Practice