Refer to the exhibits. You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch1_fgt to steer the test traffic? (Choose one answer)

A. port4
B. HUB1-VPN1
C. port1
D. port2

Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments

Brave-Dumps Admin 2025-11-08 16:37:09

Selected Answers: D

The PC is sending ping requests to Facebook.
From the exhibit, we can see that the IP address being pinged is identified by the application control engine as Facebook traffic.

Following FortiGate’s SD-WAN rule evaluation order (top to bottom):

- The first rule isn’t matched because the destination doesn’t meet the criteria.
- The second rule isn’t matched either, since the application parameters don’t align.
- The third rule matches — both the source and the application control conditions fit.

According to that rule’s configuration, the only allowed outgoing interface is port2,

which means the correct answer is D.