nerdexam
Fortinet

NSE4_FGT-7.0 · Question #28

Examine the network diagram shown in the exhibit, then answer the following question: Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to…

The correct answer is D. 172.16.32.0/24 is directly connected, port1. To route traffic from the Workstation to the Web server, FortiGate 1 (FGT1) will use the most specific and directly connected route in its routing table.

Routing

Question

Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

Exhibit

NSE4_FGT-7.0 question #28 exhibit

Options

  • A172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
  • B0.0.0.0/0 [20/0] via 10.4.200.2, port2
  • C10.4.200.0/30 is directly connected, port2
  • D172.16.32.0/24 is directly connected, port1

How the community answered

(37 responses)
  • A
    14% (5)
  • B
    22% (8)
  • C
    5% (2)
  • D
    59% (22)

Why each option

To route traffic from the Workstation to the Web server, FortiGate 1 (FGT1) will use the most specific and directly connected route in its routing table.

A172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

Route 172.16.0.0/16 is less specific than 172.16.32.0/24 and has a higher administrative distance of 50, making it a less preferred route compared to a directly connected, more specific option.

B0.0.0.0/0 [20/0] via 10.4.200.2, port2

The 0.0.0.0/0 default route is the least specific route and is only used when no more specific routes to the destination exist, making it a suboptimal choice if a directly connected or more specific static route is available.

C10.4.200.0/30 is directly connected, port2

Route 10.4.200.0/30 describes a directly connected subnet on port2, which is typically a transit or point-to-point link, making it an unlikely network for a web server compared to a dedicated host subnet.

D172.16.32.0/24 is directly connected, port1Correct

The best candidate route for routing traffic is always the most specific matching route in the routing table, and directly connected routes (like 172.16.32.0/24 on port1) are preferred due to their highest specificity and lowest administrative distance (0).

Concept tested: FortiGate routing table lookup (specificity/AD)

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/102917/static-routing

Topics

#Routing table#Static routes#Longest prefix match

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice