nerdexam
Fortinet

NSE4_FGT-7.0 · Question #34

Refer to the exhibit. Which contains a PerformanceSLA configuration. An administrator has configured a performance SLA on FortiGate. Which failed to generate any traffic. Why is FortiGate not…

The correct answer is D. You need to turn on the Enable probe packets switch. The FortiGate Performance SLA is not generating traffic because the "Enable probe packets" switch, which activates the SLA probes, was not turned on.

Troubleshooting and Monitoring

Question

Refer to the exhibit. Which contains a PerformanceSLA configuration. An administrator has configured a performance SLA on FortiGate. Which failed to generate any traffic. Why is FortiGate not generating any traffic for the performance SLA?

Exhibit

NSE4_FGT-7.0 question #34 exhibit

Options

  • AParticipants configured are not SD-WAN members.
  • BThere may not be a static route to route the performance SLA traffic.
  • CThe Ping protocol is not supported for the public servers that are configured.
  • DYou need to turn on the Enable probe packets switch.

How the community answered

(49 responses)
  • A
    22% (11)
  • B
    12% (6)
  • C
    6% (3)
  • D
    59% (29)

Why each option

The FortiGate Performance SLA is not generating traffic because the "Enable probe packets" switch, which activates the SLA probes, was not turned on.

AParticipants configured are not SD-WAN members.

While participants should typically be SD-WAN members for SD-WAN rules, the question specifically states the SLA failed to generate any traffic, implying a more fundamental issue with the SLA's activation, not its target.

BThere may not be a static route to route the performance SLA traffic.

If there were no static route, traffic might fail to reach the destination, but the question implies no traffic generation at all by the SLA itself, which precedes routing failures.

CThe Ping protocol is not supported for the public servers that are configured.

Ping (ICMP) is a commonly supported protocol for Performance SLA probes, especially for public servers, so this is an unlikely general reason for complete traffic generation failure.

DYou need to turn on the Enable probe packets switch.Correct

The "Enable probe packets" switch explicitly controls whether the FortiGate will send out the configured probes for a Performance SLA. If this setting is disabled, no traffic will be generated for the SLA, regardless of other configurations. This switch is fundamental for activating the probing mechanism to measure link performance.

Concept tested: FortiGate Performance SLA probe activation

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526715/sd-wan-performance-sla

Topics

#Performance SLA#SD-WAN#Troubleshooting#Probe packets

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice