Fortinet Exam FCSS_SASE_AD-24 Topic 1 Question 5 Discussion

Actual exam question for Fortinet's FCSS_SASE_AD-24 exam

Question #: 5
Topic #: 1

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.

Based on the output, what is the reason for the ping failures?

AThe Secure Private Access (SPA) policy needs to allow PING service.

BQuick mode selectors are restricting the subnet.

CThe BGP route is not received.

DNetwork address translation (NAT) is not enabled on the spoke-to-hub policy.

Show Suggested Answer

Suggested Answer: C

by Cassie at Mar 06, 2025, 06:49 AM

Limited Time Offer

25%

Off

Get Premium FCSS_SASE_AD-24 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dean

1 days ago

I'm going with option C. If the BGP route isn't being learned, that would explain why the webserver can't be reached. Gotta make sure those routing ducks are in a row.

upvoted 0 times

...

Wendell

8 days ago

Hmm, the BGP route not being received sounds like the most likely issue. I mean, if the tunnel is up, the ping should work, right? Unless there's something funky going on with the routing.

upvoted 0 times

...