nerdexam
Fortinet

NSE4 · Question #486

Which action does the FortiGate take when link health monitor times out?

The correct answer is D. All routes using the next-hop gateway configured in the link health monitor are removed from. When a FortiGate's link health monitor times out, it removes all routes from the routing table that use the configured next-hop gateway that failed the health check.

Submitted by ahmad_uae· Apr 18, 2026Routing and SD-WAN

Question

Which action does the FortiGate take when link health monitor times out?

Options

  • AAll routes to the destination subnet configured in the link health monitor are removed from the
  • BThe distance values of all routes using interface configured in the link health monitor are
  • CThe priority values of all routes using configured in the link health monitor are increased.
  • DAll routes using the next-hop gateway configured in the link health monitor are removed from

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    93% (28)

Why each option

When a FortiGate's link health monitor times out, it removes all routes from the routing table that use the configured next-hop gateway that failed the health check.

AAll routes to the destination subnet configured in the link health monitor are removed from the

The link health monitor is tied to a specific next-hop gateway; it's the routes using that gateway that are affected, not necessarily all routes to a destination subnet.

BThe distance values of all routes using interface configured in the link health monitor are

Increasing the administrative distance of routes would make them less preferred, but the direct action for a failed gateway is typically to remove the routes rather than just modify their distance.

CThe priority values of all routes using configured in the link health monitor are increased.

Increasing priority values would make routes *more* preferred, which is the opposite of the desired behavior when a link or next-hop fails.

DAll routes using the next-hop gateway configured in the link health monitor are removed fromCorrect

A link health monitor is configured to periodically check the reachability of a specific next-hop gateway. If the monitor times out (meaning the gateway is unreachable), the FortiGate's primary action is to remove all static routes from its routing table that are configured to use that failed next-hop gateway, effectively blackholing traffic or forcing it to fail over to another path.

Concept tested: FortiGate link health monitor actions

Source: https://docs.fortinet.com/document/fortigate/7.4.0/admin-guide/60225/sd-wan-health-checks

Topics

#link health monitor#routing#next-hop gateway#FortiGate behavior

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice