NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ49

VerifiedSD-WAN traffic control and IPsec

Refer to the exhibits.

Question Image

Question Image

Question Image

Question Image

You collected the output displayed in the exhibits and need to determine which interface HTTP traffic from user device 10.0.1.101 to corporate web server 10.0.0.126 will traverse.

All SD-WAN links are stable.

Which interface will FortiGate use to steer the traffic?

Explanation

Traffic to 10.0.0.126 from 10.0.1.101 matches the Corp SD-WAN service. That service enables load balancing and includes member sequence numbers 3, 4, and 5. The policy-route entry maps those eligible members to HUB1-VPN1, HUB1-VPN2, and HUB1-VPN3 and specifies the round-robin hash mode. With every link stable, FortiGate can distribute matching HTTP sessions across any of those three VPN interfaces; one observed ICMP flow on HUB1-VPN3 does not constrain the HTTP traffic to that interface.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!