Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE8_812 Exam - Topic 2 Question 40 Discussion

Posted by Leana on Jan 12, 2025 at 04:14 PM

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

Suggested Answer: B, D, E

Bmust be set to enable mode-cfg, which is required for injecting IKE routes on the ADVPN shortcut tunnels.

Dmust be set to enable add-route, which is the command that actually injects the IKE routes.

Emust be set to enable mode-cfg-allow-client-selector, which allows custom phase 2 selectors to be configured.

The other options are incorrect. Option A is incorrect because net-device disable is not required for injecting IKE routes on the ADVPN shortcut tunnels. Option C is incorrect because IKE version 1 is not supported for ADVPN.

References:

Phase 2 selectors and ADVPN shortcut tunnels | FortiGate / FortiOS 7.2.0

Configuring SD-WAN/ADVPN with FortiGate | FortiGate / FortiOS 7.2.0


Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
31 comments · newest first
AL
Alishia 10 months ago
Nah, I think it's port1 and port1.
MO
Mozell 11 months ago
Port16 is definitely involved for one of them.
JE
Jess 11 months ago
Wait, are we sure about that? Seems off to me.
CA
Carli 11 months ago
Definitely agree with that!
HO
Hoa 11 months ago
I'm pretty sure it's port1 and port15.
CO
Cortney 12 months ago
I think I saw a similar question where the outgoing interfaces were determined by the subnet mask. I want to say it's port1 and port1, but I'm not entirely confident.
TH
Thurman 12 months ago
I feel like I should know this, but I keep mixing up the port numbers. Was it port16 and port1 for the first IP?
YO
Yolande 12 months ago
This question reminds me of a practice one where we had to identify outgoing interfaces based on IP addresses. I think it might be port1 and port15, but I can't recall the specifics.
MA
Maile 1 year ago
I remember something about how SD-WAN routes traffic based on policies, but I'm not sure which ports to choose here.
KE
Kenneth 1 year ago
This is a good test of my understanding of SD-WAN routing. I'll carefully consider the options and use my knowledge of subnet routing to arrive at the right answer.
PH
Phuong 1 year ago
Hmm, I'm not entirely sure about this one. I'll need to walk through the logic step-by-step to make sure I'm not missing anything.
VI
Viki 1 year ago
Okay, I think I've got this. Based on the subnet information and the interfaces shown in the diagram, the correct answer should be port16 and port1.
AL
Alexis 1 year ago
I'm a bit confused by the SD-WAN configuration in the exhibit. I'll need to review my notes on SD-WAN principles to make sure I understand how the routing decisions are made in this scenario.
WE
Wenona 1 year ago
This looks like a straightforward routing question. I'll need to carefully analyze the network diagram and subnet information to determine the correct outgoing interfaces.
RI
Rima 1 year ago
I wonder if the correct answer is 'All of the above' and they're just trying to confuse us. What is this, a Riddler exam?
NA
Na 1 year ago
Ah, the joys of networking exams. I feel like I'm playing a game of SD-WAN Tetris here.
LE
Leatha 1 year ago
↳ replying to Na
B) port1 and port1
JO
Joanna 1 year ago
↳ replying to Na
I think it's A) port16 and port1.
FI
Filiberto 1 year ago
↳ replying to Na
A) port16 and port1
RO
Rodolfo 1 year ago
I don't know, this exhibit is making my head spin. I'll just close my eyes and randomly pick an answer. Eeny, meeny, miny, moe...
LA
Launa 1 year ago
Wait, is this a trick question? Why would it use the same port for both pings? I'm leaning towards option C.
CE
Ceola 1 year ago
↳ replying to Launa
User 3: I'm also going with option C. It just seems more logical.
ER
Eric 1 year ago
↳ replying to Launa
User 2: Yeah, I agree. It wouldn't make sense to use the same port for both pings.
JE
Jenelle 1 year ago
↳ replying to Launa
User 1: I think it's a trick question too. Option C seems like the right choice.
CH
Charlene 1 year ago
Hmm, this seems straightforward. I think I'll go with option A, since the exhibit shows the 172.16.205.0/24 subnet is connected to port16 and port1.
NO
Noe 1 year ago
↳ replying to Charlene
User 3: I think we can confidently select option A based on the information provided.
LI
Lisha 1 year ago
↳ replying to Charlene
User 2: Yeah, the exhibit clearly shows the subnet connected to port16 and port1.
MA
Marnie 1 year ago
↳ replying to Charlene
User 1: I agree, option A seems to be the correct choice.
YU
Yuette 2 years ago
I'm not sure, but I think the answer might be C) port16 and port15. Can someone explain why it's not the correct answer?
KA
Katina 2 years ago
I agree with Francine, because the traffic will go out through port16 to reach 10.1.100.2 and port1 to reach 10.1.100.22.
FR
Francine 2 years ago
I think the answer is A) port16 and port1.
0/2000 characters

Save Cancel