Fortinet Exam NSE6_WCS-7.0 Topic 3 Question 8 Discussion

Actual exam question for Fortinet's NSE6_WCS-7.0 exam

Question #: 8
Topic #: 3

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

AGWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet.

BInbound traffic is directed to the GWLB through a GWLB endpoint.

CInbound traffic is directed to the application subnet through a GWLB endpoint.

DGWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

Show Suggested Answer

Suggested Answer: B, D

Traffic Direction through GWLB Endpoint:

The ingress route table directs inbound traffic to the GWLB through a GWLB endpoint (GWLBe). This endpoint is responsible for directing traffic to the Gateway Load Balancer for further processing (Option B).

GENEVE Encapsulation:

The GWLB encapsulates the inbound traffic using the GENEVE protocol. This encapsulated traffic is then sent to FortiGate instances for security inspection. The use of GENEVE ensures that the original traffic context is preserved and can be analyzed by FortiGate (Option D).

Other Options Analysis:

Option A is incorrect because GWLB does not forward traffic without encapsulation in its dedicated subnet.

Option C is incorrect as the inbound traffic is directed to the GWLB endpoint first, not directly to the application subnet.

AWS Gateway Load Balancer Documentation: AWS GWLB

GENEVE Protocol Overview: GENEVE Protocol

by Richelle at Feb 07, 2025, 09:05 AM

Limited Time Offer

25%

Off

Get Premium NSE6_WCS-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorothy

6 days ago

Haha, I bet the exam writers just threw in option A to trip up the candidates. Who would ever expect the GWLB to forward traffic without encapsulation?

upvoted 0 times

...

Jess

7 days ago

I think option C is also true. The exhibit shows that inbound traffic is directed to the application subnet through the GWLB endpoint.

upvoted 0 times

...

2 months ago

Option B is clearly the correct answer. The exhibit shows that inbound traffic is directed to the GWLB through a GWLB endpoint.

upvoted 0 times

Gaston

1 months ago

Yes, that's right. The exhibit clearly shows that traffic is directed to the GWLB through a GWLB endpoint.

upvoted 0 times

...

Giovanna

1 months ago

I agree, option B is correct. Inbound traffic is directed to the GWLB through a GWLB endpoint.

upvoted 0 times

...

Rose

2 months ago

I think option B is correct because inbound traffic is directed to the GWLB through a GWLB endpoint.

upvoted 0 times

...