FCSS-NST-SE-7-6: Fortinet NSE 6 - Network Security 7.6 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ4

Routing

Refer to the exhibits.

Exhibit 1 –

Question Image

Exhibit 2 –

Question Image

The FortiGate configuration and partial Internet-session information for a user on the internal network are displayed.

An administrator wants to test session failover between the two service-provider connections. Which two changes must the administrator make to force this existing session to immediately begin using the other interface?

Choose two
  • A Modify the distance of the port1 route to 1.
  • B Change the priority of the port1 static route to 11.
  • C Configure set snat-route-change enable.
  • D Change the priority of the port2 static route to 5.
Explanation

With equal route distances, the static route with the lower priority is preferred; therefore, changing port1's priority from 5 to 11 makes the port2 route with priority 10 preferred. SNAT sessions normally keep their original outbound interface when the old route remains active. Enabling snat-route-change causes a new route lookup after the routing change and applies new SNAT, allowing the existing session to use port2.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!