NSE4_FGT-7.0 · Question #99
Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)
FortiGate performs route lookups on specific packets during a session to determine the appropriate egress interface and gateway for traffic forwarding. This ensures both initial outbound traffic and subsequent return traffic are correctly routed.
Question
Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)
Options
- ALookup is done on the trust packet from the session originator
- BLookup is done on the last packet sent from the respender
- CLookup is done on every packet, regardless of direction
- DLookup is done on the trust reply packet from the respender Answer: AD
Why each option
FortiGate performs route lookups on specific packets during a session to determine the appropriate egress interface and gateway for traffic forwarding. This ensures both initial outbound traffic and subsequent return traffic are correctly routed.
Route lookup is performed on the initial packets of a session to set up the forwarding path, not on the last packet sent from the responder.
Performing a route lookup on every single packet, regardless of direction, would be inefficient and is not how session-based firewalls process traffic; routing is determined once per session direction.
Concept tested: FortiGate session route lookup behavior
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/464817/how-the-fortigate-routes-traffic
Topics
Community Discussion
No community discussion yet for this question.