Refer to the exhibit. The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers. There is no SDN connector used in this solution Which…

Question

Exhibit

Options

• ALambda IP address with one static route.
• BProbe IP address with two static routes
• CProbe IP address with one BGP route
• DPublic load balancer IP address with two BGP routes.

• A
  3% (1)
• B
  83% (29)
• C
  11% (4)
• D
  3% (1)

Explanation

Based on the provided exhibit showing an active-passive FortiGate High Availability (HA) pair with external and internal Azure load balancers and without the use of an SDN connector, the administrator should implement a Probe IP address with two static routes (Option B). Probe IP Address: Azure load balancers use a health probe to determine the health of the instances in the backend pool. The health probe ensures that the load balancer only directs traffic to the active (primary) FortiGate in an HA pair. Two Static Routes: Given that this is an active-passive setup, static routing should be used to ensure deterministic traffic flow. Two static routes would be configured to ensure that traffic can flow to the active unit and be correctly routed to the protected subnets in failover scenarios.

No community discussion yet for this question.