ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 39 - NSE7_PBC-7.2 discussion

Report
Export

Refer to the exhibit.

The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers. There is no SDN connector used in this solution

Which configuration should the administrator implement?

A.
Lambda IP address with one static route.
Answers
A.
Lambda IP address with one static route.
B.
Probe IP address with two static routes
Answers
B.
Probe IP address with two static routes
C.
Probe IP address with one BGP route
Answers
C.
Probe IP address with one BGP route
D.
Public load balancer IP address with two BGP routes.
Answers
D.
Public load balancer IP address with two BGP routes.
Suggested answer: B

Explanation:

Based on the provided exhibit showing an active-passive FortiGate High Availability (HA) pair with external and internal Azure load balancers and without the use of an SDN connector, the administrator should implement a Probe IP address with two static routes (Option B).

Probe IP Address: Azure load balancers use a health probe to determine the health of the instances in the backend pool. The health probe ensures that the load balancer only directs traffic to the active (primary) FortiGate in an HA pair.

Two Static Routes: Given that this is an active-passive setup, static routing should be used to ensure deterministic traffic flow. Two static routes would be configured to ensure that traffic can flow to the active unit and be correctly routed to the protected subnets in failover scenarios.

asked 18/09/2024
Aleh Patskevich
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first