View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


Question 103 Discussion

Refer to the exhibits - An administrator is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table. What is the most likely cause of this issue? (Choose one answer)

  • A. A better route to the 8.8.8.8/32 network exists in the routing table.
  • B. FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table.
  • C. The administrator has misconfigured redistribution of routes on FGT-A.
  • D. FGT-B is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.
Correct Answer: D

Brave-Dump Clients Votes

B 33.33%
D 33.33%
A 33.33%

Comments



Adam 2026-01-07 04:26:30

Selected Answers: B


A is wrong because we only have the default route to match 8.8.8.8 which is a last resort by nature
C is wrong because we received the route in OSPF database

Under "config router ospf", we can configure:
-> set distribute-route-map-in <Route Map which references ACL or Prefix List>
-> set distribute-list-in <ACL or Prefix List>

I see both B and D are correct, so I'm not sure

James 2026-01-26 04:21:45

Selected Answers: D


If the route was denied by prefix list, it might not be even showing up on the LSDB. Distribution lists filter routes before they are installed into the routing table, while still allowing them to exist in the LSDB. Hence, the correct answer should be D.

Mehdi 2026-02-13 17:02:15

Selected Answers: A


B & D is incorrect : These filter inbound acceptance (prefix-list in route-map-in) or outbound advertisement . If denied inbound, the route wouldn't appear in the OSPF database at all but it does (LSA present).

Common in FortiGate: if a static default exists (often for Internet outbound), specific external OSPF routes may not install if they conflict or if the ASBR path relies on that default (potential recursion issue), but the primary reason for non-installation when in LSDB is a better/preferred route already winning in the RIB.