Fortinet Exam FCSS_SASE_AD-23 Topic 3 Question 6 Discussion

Actual exam question for Fortinet's FCSS_SASE_AD-23 exam

Question #: 6
Topic #: 3

Refer to the exhibits.

When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?

AFortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2. which will then route traffic to Branch-2.

BFortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route

CFortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2.

DFortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route

Show Suggested Answer

Suggested Answer: C

When remote users connected to FortiSASE require access to internal resources on Branch-2, the following process occurs:

SD-WAN Capability:

FortiSASE leverages SD-WAN to optimize traffic routing based on performance metrics and priorities.

In the priority settings, HUB-1 is configured with the highest priority (P1), whereas HUB-2 has a lower priority (P2).

Traffic Routing Decision:

FortiSASE evaluates the available hubs (HUB-1 and HUB-2) and selects HUB-1 due to its highest priority setting.

Once the traffic reaches HUB-1, it is then routed to the appropriate branch based on internal routing policies.

Branch-2 Access:

Since HUB-1 has the highest priority, FortiSASE directs the traffic to HUB-1.

HUB-1 then routes the traffic to Branch-2, providing the remote users access to the internal resources.

FortiOS 7.2 Administration Guide: Details on SD-WAN configurations and priority settings.

FortiSASE 23.2 Documentation: Explains how FortiSASE integrates with SD-WAN to route traffic based on defined priorities and performance metrics.

by Magda at Jul 02, 2024, 07:00 PM

Limited Time Offer

25%

Off

Get Premium FCSS_SASE_AD-23 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Clement

3 months ago

I'm all about that dynamic routing, baby! Option D is the way to go. Gotta keep those remote users on their toes, you know?

upvoted 0 times

Thaddeus

2 months ago

Dynamic routing definitely adds flexibility to the network. Option D seems like the most reliable choice.

upvoted 0 times

...

Kristofer

3 months ago

I think option D is the best choice too. Directing traffic to Branch-2 using dynamic routes makes sense.

upvoted 0 times

...

Delmy

3 months ago

I agree, dynamic routing is the way to go. Keeps things efficient and secure.

upvoted 0 times

...

Adrianna

3 months ago

Ha, this question is a real head-scratcher. I bet the exam writers had a good laugh coming up with these options. Option B seems the safest bet though.

upvoted 0 times

...

Helaine

3 months ago

Hmm, I'm not sure. Option D with the dynamic route could work too, but it might be less reliable than a static route. Tough call!

upvoted 0 times

...

Brittani

3 months ago

I'm not convinced. Wouldn't it make more sense for FortiSASE to use the SD-WAN capability and route through HUB-2? That seems more efficient.

upvoted 0 times

Barrie

2 months ago

Yes, it does make sense to use SD-WAN through HUB-2 for efficient routing to Branch-2.

upvoted 0 times

...

Maybelle

2 months ago

I see your point. Using SD-WAN through HUB-2 does seem like the better choice for routing.

upvoted 0 times

...

Cory

3 months ago

But what if FortiSASE uses the AD VPN protocol instead? Would that still work efficiently?

upvoted 0 times

...

Kristeen

3 months ago

I think option A is correct. FortiSASE will use SD-WAN and route through HUB-2.

upvoted 0 times

...

Anabel

4 months ago

I'm leaning towards B, as using the AD VPN protocol to route traffic directly to Branch-2 seems like a more efficient option.

upvoted 0 times

...

Kattie

4 months ago

That's an interesting point, but I still think A makes more sense in this scenario.

upvoted 0 times

...

Toshia

4 months ago

I disagree, I believe the answer is C, as FortiSASE will route traffic to HUB-1 before reaching Branch-2.

upvoted 0 times

...

Laurel

4 months ago

Option B makes the most sense to me. Using a static route for the AD VPN protocol seems like the logical choice here.

upvoted 0 times

Luisa

4 months ago

Yes, using a static route for the AD VPN protocol would ensure direct access to internal resources on Branch-2.

upvoted 0 times

...

Maryann

4 months ago

I agree, option B does seem like the most logical choice for routing traffic to Branch-2.

upvoted 0 times

...

Kattie

4 months ago

I think the answer is A, because FortiSASE will use the SD-WAN capability to route traffic to HUB-2 first.

upvoted 0 times

...