NSE4 · Question #484
Which of the following fields contained in the IP/TCP/UDP headers can be used to make a routing decision when using policy-based routing? (Choose three)
The correct answer is A. Source IP address. C. Source TCP/UDP ports D. Type of service. Policy-based routing (PBR) decisions can be made using fields such as the source IP address, source or destination TCP/UDP ports, and the Type of Service (ToS) field within IP headers.
Question
Which of the following fields contained in the IP/TCP/UDP headers can be used to make a routing decision when using policy-based routing? (Choose three)
Options
- ASource IP address.
- BTCP flags
- CSource TCP/UDP ports
- DType of service.
- EChecksum
How the community answered
(35 responses)- A91% (32)
- B6% (2)
- E3% (1)
Why each option
Policy-based routing (PBR) decisions can be made using fields such as the source IP address, source or destination TCP/UDP ports, and the Type of Service (ToS) field within IP headers.
Policy-based routing commonly uses the source IP address to identify specific hosts or subnets from which traffic originates, allowing for different routing paths based on the source.
TCP flags (e.g., SYN, ACK, FIN) indicate the state or control information of a TCP connection but are typically not used as criteria for making policy-based routing decisions.
Source and destination TCP/UDP ports are crucial for PBR to identify specific applications or services (e.g., HTTP, DNS) and route their traffic differently.
The Type of Service (ToS) field (or its modern equivalent, DSCP) in the IP header is used to categorize traffic and can be leveraged by PBR to apply specific routing paths or quality of service treatments to different classes of traffic.
The Checksum field is used for error detection in headers and data; it is not a parameter used to make routing decisions in policy-based routing.
Concept tested: Policy-based routing criteria
Source: https://docs.fortinet.com/document/fortigate/7.4.0/admin-guide/60225/policy-routes
Topics
Community Discussion
No community discussion yet for this question.