Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device. The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook. Based on the exhibits, which two statements are correct? (Choose two answers)

A. There is no service defined for the Facebook application, so FortiGate applies service rule 3 and directs the traffic to headquarters.
B. When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1, HQ_T2, HQ_T3.
C. FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.
D. When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.

Correct Answer: B,C

Brave-Dump Clients Votes

BC 100%

Comments

Brave-Dumps Admin 2025-10-26 18:11:16

Selected Answers: B, C

C — Service (rule) 2 explicitly matches Social.Media apps, so Facebook traffic from 10.0.1.0/26 is steered by service 2.

B — If the application is not recognized, the traffic falls through to service 3, which is configured with hash-mode=round-robin across HQ_T1, HQ_T2, HQ_T3, so it load-balances over those tunnels.

What do you think?

FortiXpert 2025-11-02 01:18:07

Selected Answers: B, C

C is correct becuz social media application is present
B is correct becuz if the application is not identify it will match the last rule no 3 as dst is 0.0.0.0/0