nerdexam
Fortinet

NSE4 · Question #534

View the Exhibit. The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to…

The correct answer is D. Execute ping-options source 10.0.1.254. To confirm that FortiGate 2 is properly routing traffic to the 10.0.1.0/24 subnet, FortiGate 1 should ping a destination IP address within that subnet.

Submitted by minji_kr· Apr 18, 2026VPN and Routing

Question

View the Exhibit. The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to FortiGate 2 from the CLI of FortiGate 1. What ping option needs to be enabled before running the ping?

Options

  • AExecute ping-options source port1
  • BExecute ping-options source 10.200.1.1.
  • CExecute ping-options source 10.200.1.2
  • DExecute ping-options source 10.0.1.254

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    11% (3)
  • C
    4% (1)
  • D
    81% (22)

Why each option

To confirm that FortiGate 2 is properly routing traffic to the 10.0.1.0/24 subnet, FortiGate 1 should ping a destination IP address within that subnet.

AExecute ping-options source port1

`port1` is an interface name, not an IP address that can be used as a ping source or destination for verifying routing to a specific subnet.

BExecute ping-options source 10.200.1.1.

If 10.200.1.1 is FortiGate 1's own interface IP, pinging it confirms nothing about FortiGate 2's routing to 10.0.1.0/24.

CExecute ping-options source 10.200.1.2

10.200.1.2 is likely FortiGate 2's interface IP on a transit network; pinging this IP only confirms reachability to FortiGate 2 itself, not its routing capabilities to the 10.0.1.0/24 subnet.

DExecute ping-options source 10.0.1.254Correct

To test if FortiGate 2 is correctly routing to the 10.0.1.0/24 subnet, FortiGate 1 must ping an address that resides within that specific subnet, such as 10.0.1.254 (which is likely FortiGate 2's interface IP for that subnet or a host within it), directly verifying FortiGate 2's ability to forward traffic to the target subnet.

Concept tested: FortiGate ping for routing verification

Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/169046/execute-ping

Topics

#Routing#ICMP#FortiGate CLI#Network Troubleshooting

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice