View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam
NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #29 Discussion
Community Explanations & Comments (4)
Adam
9 months ago
Selected: B
Considering existing 3 BGP peerings (FortiGate_A with FortiGate_B, FortiGate_B with FortiGate_C, and FortiGate_A with FortiGate_C), then:
A -> as the network is not in routing table, adding more restriction for filtering inbound routes won't help, so it's wrong
B -> it achieves the requirement
C -> redistributing all directly connected networks contradicts request to add "only the subnet 100.64.2.0/24"
D -> to redistribute routes on FortiGate_B learned from FortiGate_C (via BGP peering between FortiGate_B and FortiGate_C) to FortiGate_A (via BGP peering between FortiGate_A and FortiGate_B), also doesn't restrict it to only 100.64.2.0/24 as requested, so it's wrong
A -> as the network is not in routing table, adding more restriction for filtering inbound routes won't help, so it's wrong
B -> it achieves the requirement
C -> redistributing all directly connected networks contradicts request to add "only the subnet 100.64.2.0/24"
D -> to redistribute routes on FortiGate_B learned from FortiGate_C (via BGP peering between FortiGate_B and FortiGate_C) to FortiGate_A (via BGP peering between FortiGate_A and FortiGate_B), also doesn't restrict it to only 100.64.2.0/24 as requested, so it's wrong
Anonymous User
5 months ago
Selected: A
FortiGate_A is receiving multiple BGP routes and the requirement is to add only 100.64.2.0/24 into FortiGate_A’s routing table. The study guide says inbound BGP filtering happens between RIB-in and the local routing table, and route maps can filter injected/advertised routes using route-map-in and route-map-out
Anonymous User
5 months ago
Selected: B
B correct
Anonymous User
5 months ago
Selected: B
c: plain redistribute connected violates the requirement to add only one specific subnet.
it must be b
it must be b
Refer to the exhibit. A network topology and a FortiGate routing table is shown. What must you configure in the BGP section to add only the subnet 100.64.2.0/24 in the routing table of FortiGate_A? (Choose one answer)
Brave-Dump Community Votes