Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE8_812 Exam - Topic 6 Question 57 Discussion

You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance. Based on the behavior of this feature which statement is correct?
A) You can use src-ip or dst-ip-dport on dp-load-distribution-method to make SSL VPN load balancing work as expected.
B) If an FPM goes down, SSL VPN IP pool IP addresses will be re-allocated to the remaining FPMs.
C) To have better traffic distribution you should use IP pools that increment in multiples of 12.
D) Enabling SSL VPN load balancing will clear the session table.

Fortinet NSE8_812 Exam - Topic 6 Question 57 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 57
Topic #: 6
[All NSE8_812 Questions]

You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance. Based on the behavior of this feature which statement is correct?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Eun
3 hours ago
I disagree, B seems more accurate. IPs should be re-allocated if an FPM fails.
upvoted 0 times
...
Elsa
5 days ago
I think option A is correct. It makes sense for load balancing.
upvoted 0 times
...
Marica
10 days ago
Wait, are we sure about B)? That seems off to me.
upvoted 0 times
...
Kizzy
16 days ago
D) sounds right, clearing the session table is a common side effect.
upvoted 0 times
...
Shawna
2 months ago
C) is interesting, but I’ve never heard of using multiples of 12.
upvoted 0 times
...
Billy
2 months ago
I disagree, B) is misleading, IPs don’t just reallocate like that.
upvoted 0 times
...
Eugene
2 months ago
A) is correct, src-ip works great for load balancing.
upvoted 0 times
...
Lyda
3 months ago
Wait, really? I thought sessions would persist through that!
upvoted 0 times
...
Markus
3 months ago
D is true, enabling it does clear the session table.
upvoted 0 times
...
Cristal
3 months ago
C is interesting, but why multiples of 12? Sounds random.
upvoted 0 times
...
Albert
3 months ago
I disagree, B seems off. FPMs should handle sessions better.
upvoted 0 times
...
Patria
3 months ago
A is correct, src-ip works great for load balancing.
upvoted 0 times
...
Eladia
3 months ago
I vaguely recall that enabling SSL VPN load balancing might affect the session table, but I can't remember the specifics. Did it clear it or just modify it?
upvoted 0 times
...
Glory
4 months ago
I'm a bit confused about the IP pools. Did we really discuss using multiples of 12 for better distribution? That seems odd to me.
upvoted 0 times
...
Cristen
4 months ago
I feel like I saw a question about FPMs and IP pool reallocation in practice tests. If one goes down, the remaining ones should take over, right?
upvoted 0 times
...
Raul
4 months ago
I think I remember something about using src-ip or dst-ip-dport for load balancing, but I'm not entirely sure if that's the right method for SSL VPN.
upvoted 0 times
...

Save Cancel