NSE4 · Question #534
View the Exhibit. The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to…
The correct answer is D. Execute ping-options source 10.0.1.254. To confirm that FortiGate 2 is properly routing traffic to the 10.0.1.0/24 subnet, FortiGate 1 should ping a destination IP address within that subnet.
Question
View the Exhibit. The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to FortiGate 2 from the CLI of FortiGate 1. What ping option needs to be enabled before running the ping?
Options
- AExecute ping-options source port1
- BExecute ping-options source 10.200.1.1.
- CExecute ping-options source 10.200.1.2
- DExecute ping-options source 10.0.1.254
How the community answered
(27 responses)- A4% (1)
- B11% (3)
- C4% (1)
- D81% (22)
Why each option
To confirm that FortiGate 2 is properly routing traffic to the 10.0.1.0/24 subnet, FortiGate 1 should ping a destination IP address within that subnet.
`port1` is an interface name, not an IP address that can be used as a ping source or destination for verifying routing to a specific subnet.
If 10.200.1.1 is FortiGate 1's own interface IP, pinging it confirms nothing about FortiGate 2's routing to 10.0.1.0/24.
10.200.1.2 is likely FortiGate 2's interface IP on a transit network; pinging this IP only confirms reachability to FortiGate 2 itself, not its routing capabilities to the 10.0.1.0/24 subnet.
To test if FortiGate 2 is correctly routing to the 10.0.1.0/24 subnet, FortiGate 1 must ping an address that resides within that specific subnet, such as 10.0.1.254 (which is likely FortiGate 2's interface IP for that subnet or a host within it), directly verifying FortiGate 2's ability to forward traffic to the target subnet.
Concept tested: FortiGate ping for routing verification
Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/169046/execute-ping
Topics
Community Discussion
No community discussion yet for this question.