nerdexam
Fortinet

NSE6_SDW_AD-7.6 · Question #37

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the…

The correct answer is D. port2. The ping target IP 157.240.19.35 matches an App Control entry for Facebook (ID 15832). According to the diagnose firewall route list output, this application is handled by vwl_service=2 (Non-Critical-DIA), which routes traffic via oif=4 (port2). Therefore, FortiGate steers the…

SD-WAN Monitoring and Troubleshooting

Question

Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch 1_fgt to steer the test traffic?

Exhibits

NSE6_SDW_AD-7.6 question #37 exhibit 1
NSE6_SDW_AD-7.6 question #37 exhibit 2

Options

  • Aport4
  • BHUB1-VPN1
  • Cport1
  • Dport2

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    26% (6)
  • C
    13% (3)
  • D
    57% (13)

Explanation

The ping target IP 157.240.19.35 matches an App Control entry for Facebook (ID 15832). According to the diagnose firewall route list output, this application is handled by vwl_service=2 (Non-Critical-DIA), which routes traffic via oif=4 (port2). Therefore, FortiGate steers the Facebook test traffic through port2.

Topics

#interface selection#traffic steering#SD-WAN rule matching#LAN subnet routing

Community Discussion

No community discussion yet for this question.

Full NSE6_SDW_AD-7.6 Practice