NSE4_FGT-7.0 · Question #28
Examine the network diagram shown in the exhibit, then answer the following question: Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to…
The correct answer is D. 172.16.32.0/24 is directly connected, port1. To route traffic from the Workstation to the Web server, FortiGate 1 (FGT1) will use the most specific and directly connected route in its routing table.
Question
Examine the network diagram shown in the exhibit, then answer the following question:
Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?
Exhibit
Options
- A172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
- B0.0.0.0/0 [20/0] via 10.4.200.2, port2
- C10.4.200.0/30 is directly connected, port2
- D172.16.32.0/24 is directly connected, port1
How the community answered
(37 responses)- A14% (5)
- B22% (8)
- C5% (2)
- D59% (22)
Why each option
To route traffic from the Workstation to the Web server, FortiGate 1 (FGT1) will use the most specific and directly connected route in its routing table.
Route 172.16.0.0/16 is less specific than 172.16.32.0/24 and has a higher administrative distance of 50, making it a less preferred route compared to a directly connected, more specific option.
The 0.0.0.0/0 default route is the least specific route and is only used when no more specific routes to the destination exist, making it a suboptimal choice if a directly connected or more specific static route is available.
Route 10.4.200.0/30 describes a directly connected subnet on port2, which is typically a transit or point-to-point link, making it an unlikely network for a web server compared to a dedicated host subnet.
The best candidate route for routing traffic is always the most specific matching route in the routing table, and directly connected routes (like 172.16.32.0/24 on port1) are preferred due to their highest specificity and lowest administrative distance (0).
Concept tested: FortiGate routing table lookup (specificity/AD)
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/102917/static-routing
Topics
Community Discussion
No community discussion yet for this question.
