Fortinet Exam FCP_WCS_AD-7.4 Topic 4 Question 8 Discussion

Actual exam question for Fortinet's FCP_WCS_AD-7.4 exam

Question #: 8
Topic #: 4

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

AGWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet.

BInbound traffic is directed to the GWLB through a GWLB endpoint.

CInbound traffic is directed to the application subnet through a GWLB endpoint.

DGWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

Show Suggested Answer

Suggested Answer: B, D

Traffic Direction through GWLB Endpoint:

The ingress route table directs inbound traffic to the GWLB through a GWLB endpoint (GWLBe). This endpoint is responsible for directing traffic to the Gateway Load Balancer for further processing (Option B).

GENEVE Encapsulation:

The GWLB encapsulates the inbound traffic using the GENEVE protocol. This encapsulated traffic is then sent to FortiGate instances for security inspection. The use of GENEVE ensures that the original traffic context is preserved and can be analyzed by FortiGate (Option D).

Other Options Analysis:

Option A is incorrect because GWLB does not forward traffic without encapsulation in its dedicated subnet.

Option C is incorrect as the inbound traffic is directed to the GWLB endpoint first, not directly to the application subnet.

AWS Gateway Load Balancer Documentation: AWS GWLB

GENEVE Protocol Overview: GENEVE Protocol

by Flo at Jun 21, 2024, 04:45 PM

Limited Time Offer

25%

Off

Get Premium FCP_WCS_AD-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilda

4 months ago

I'm feeling confident about this one. B and D all the way! Inbound traffic goes through the GWLB endpoint, and the GWLB takes care of the encapsulation. Easy peasy!

upvoted 0 times

Yong

2 months ago

That's right! The GWLB takes care of encapsulation and directs inbound traffic to the application subnet. B and D are the correct choices.

upvoted 0 times

...

Berry

2 months ago

Yes, the GWLB encapsulates traffic with the GENEVE protocol before sending it to FortiGate. So option D is definitely true.

upvoted 0 times

...

Isaiah

2 months ago

I agree, B and D are the correct options. The GWLB endpoint is where inbound traffic is directed.

upvoted 0 times

...

Trina

3 months ago

That's right! The GWLB plays a key role in directing inbound traffic and handling encapsulation.

upvoted 0 times

...

Magnolia

3 months ago

Yes, the GWLB handles the encapsulation with the GENEVE protocol before sending it to FortiGate.

upvoted 0 times

...

Eun

3 months ago

I agree, B and D are the correct options. The inbound traffic goes through the GWLB endpoint.

upvoted 0 times

...

Lili

4 months ago

Hmm, let's see. I'm gonna go with B and D. Gotta love that GENEVE encapsulation! It's like wrapping a present for the firewall.

upvoted 0 times

Rodrigo

3 months ago

D) GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

upvoted 0 times

...

Miss

3 months ago

B) Inbound traffic is directed to the GWLB through a GWLB endpoint.

upvoted 0 times

...

Glenn

4 months ago

I believe option D is also true because GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

upvoted 0 times

...

An

4 months ago

Well, this is a tricky one. I'm going with B and C. The GWLB endpoint seems to be the key here, directing traffic to both the GWLB and the application subnet.

upvoted 0 times

Christiane

3 months ago

Agreed. The GWLB endpoint is the key component in directing inbound traffic to the GWLB and the application subnet.

upvoted 0 times

...

Burma

3 months ago

So, it seems like both options B and C are valid based on the information provided in the exhibit.

upvoted 0 times

...

Glenn

4 months ago

Yes, that's correct. The GWLB endpoint plays a crucial role in routing traffic to the appropriate destination.

upvoted 0 times

...

Robt

4 months ago

I think you're right. The GWLB endpoint is definitely involved in directing inbound traffic.

upvoted 0 times

...

Brent

4 months ago

I think B and D are correct. The GWLB endpoint directs inbound traffic to the GWLB, and the GWLB encapsulates the traffic using the GENEVE protocol before sending it to FortiGate.

upvoted 0 times