View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam

NSE 6 - Network Security 7.6 Support Engineer Materials - Question #34 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibits. The configuration on FortiGate and partial internet session information from a user on the internal network are shown. An administrator would like to test session failover between the two service provider connections. Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two answers)

  • A. Change the priority of the port1 static route to 11.
  • B. Configure set snat-route-change enable.
  • C. Modify the distance of the port1 route to 1.
  • D. Change the priority of the port2 static route to 5.
Correct Answer: A,B

Brave-Dump Community Votes

Answer: A, B (3 votes) 75%
Answer: A, D (1 vote) 25%

Community Explanations & Comments (4)

Pedro Joao Serafim Junior 10 months ago
Selected: A, D
I believe that change snap to enable, don't make a current effect immediately with all sessions established on firewall.
Anonymous User 10 months ago
Selected: A, B
The user wants to test session failover. Currently, the session is established on port1. Enabling `snat-route-change` and changing the priority of the default route on port 1 will force the establishment of a new session using the other route. Changing the priority of port 2 to 5 will generate an ECMP.

For me A and B are correct
James 9 months ago
Selected: A, B
D would make it become ECMP which traffic could still egress from port1
Anonymous User 6 months ago
Selected: A, B
Network_Security_Support_Engineer_7.6_Study_Guide Page 93 & 515