NSE4 Question #18: Real Exam Question with Answer & Explanation

Question

A static route is configured for a FortiGate unit from the CLI using the following commands: config router static edit 1 set device "wan1" set distance 20 set gateway 192.168.100.1 next end Which of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table?

Options

• AThe Administrative Status of the wan1 interface is displayed as Up.
• BThe Link Status of the wan1 interface is displayed as Up.
• CAll other default routes should have an equal or higher distance.
• DYou must disable DHCP client on that interface.

Explanation

For a static route to be active, the egress interface must be up both administratively and physically, and its administrative distance must be favorable compared to other routes for the same destination; disabling the DHCP client on the interface is not a requirement for a static route's activation.

Common mistakes.

• A. The wan1 interface must be administratively Up for any traffic to flow through it and for routes using it as an egress interface to be active in the routing table.
• B. The physical Link Status of the wan1 interface must be Up to ensure connectivity to the specified gateway and for the static route to be considered valid and active.
• C. A static route with a specific administrative distance will only be preferred and installed in the routing table if there are no other routes to the same destination with a lower (better) administrative distance. This is crucial for default routes.

Concept tested. FortiGate static route activation requirements

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86909/static-routes

No community discussion yet for this question.