FortiGate Routing Modes Quiz
40 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Which interface does FortiGate route packets through if the session originates from the other side?

  • port4
  • port2
  • port1 (correct)
  • port3

    • Which interface does the return packet arrive at if the session originated from the local workstation?

  • port4
  • port2 (correct)
  • port3
  • port1

    • What is the result of the return traffic following a different path than the originating traffic?

  • Security inspection is affected
  • Asymmetric routing (correct)
  • FortiGate rejects the return packet
  • Packets are dropped

    • Which routing mode checks that the best route to the source IP-address is through the incoming interface?

    <p>Strict RPF</p> Signup and view all the answers

    Which routing mode accepts traffic from a specific subnet only when a specific incoming interface is used?

    <p>Strict RPF</p> Signup and view all the answers

    Which routing mode ensures that the return packets are routed through the same interface they originated from, even if there is a better route through a different interface?

    <p>Return packet routing</p> Signup and view all the answers

    Which device in the network topology is directly connected to FortiGate port2?

    <p>Local router</p> Signup and view all the answers

    What is the default gateway for the local workstation?

    <p>10.1.0.254</p> Signup and view all the answers

    What is the purpose of FortiGate remembering the interface to source?

    <p>To improve routing efficiency</p> Signup and view all the answers

    Why does FortiGate route the return packet through port2 instead of port1, even though port1 is the better route?

    <p>To maintain traffic flow symmetry</p> Signup and view all the answers

    What are the three network devices in the local network 10.1.0.0/24?

    <p>local workstation, local router, and FortiGate port1</p> Signup and view all the answers

    Which interface is directly connected to the local router?

    <p>FortiGate port2</p> Signup and view all the answers

    What is the IP address of the remote server?

    <p>10.4.0.1</p> Signup and view all the answers

    What is the default gateway for the local workstation?

    <p>10.1.0.254</p> Signup and view all the answers

    Why does FortiGate remember the interface to source?

    <p>To route the return packets through the same interface they originated from</p> Signup and view all the answers

    What happens when an ICMP echo request is sent from the local workstation to the remote server?

    <p>The packet goes to the local router first, then to FortiGate, then to the remote router, and finally to the destination</p> Signup and view all the answers

    Which interface does the ICMP packet arrive at when it reaches FortiGate?

    <p>port2</p> Signup and view all the answers

    What is stored in the session information for the originating traffic?

    <p>The next hop to the destination</p> Signup and view all the answers

    Which interface does FortiGate route the return packet through?

    <p>port2</p> Signup and view all the answers

    What is the objective of keeping the traffic flow symmetric?

    <p>To ensure that the return packets follow the same path as the originating traffic</p> Signup and view all the answers

    What is the purpose of strict mode in FortiGate routing?

    <p>To check that the best route to the source IP-address is through the incoming interface and that it is the best route.</p> Signup and view all the answers

    What happens to traffic from 172.16.1.1 to 10.1.0.1 in strict mode?

    <p>It is blocked because there is no route to the source IP-address through the incoming interface.</p> Signup and view all the answers

    What happens to traffic from 10.4.0.1 to 10.1.0.1 in strict mode?

    <p>It is also blocked because there is an active route to 10.4.0.1 through a different interface, but it is not the best route to the source IP-address.</p> Signup and view all the answers

    What does the unit do during the second routing lookup?

    <p>The unit finds the next hop (or gateway) to the source.</p> Signup and view all the answers

    What is the purpose of return packet routing in FortiGate?

    <p>To ensure that the return packet is routed through the same interface it originated from, even if there is a better route through a different interface.</p> Signup and view all the answers

    What IP address is added to the session during the second routing lookup?

    <p>The IP address of the next hop is added to the session.</p> Signup and view all the answers

    Why is symmetric routing important for content inspection in FortiGate?

    <p>It ensures that traffic follows the same path in both directions, allowing for effective content inspection.</p> Signup and view all the answers

    What can prevent FortiGate from inspecting traffic content?

    <p>Asymmetric routing, where traffic follows different paths in each direction.</p> Signup and view all the answers

    What is the initial value of the session before the second routing lookup?

    <p>The initial value of the session is 0.0.0.0.</p> Signup and view all the answers

    What is the default routing behavior in FortiGate?

    <p>Routing is kept symmetric as much as possible.</p> Signup and view all the answers

    What happens if the traffic originates from the server side instead of the other side?

    <p>If the traffic originates from the server side, FortiGate uses the best route to the source IP-address.</p> Signup and view all the answers

    Which interface does FortiGate route packets through if the session originates from the other side?

    <p>The interface that the return packets originated from.</p> Signup and view all the answers

    What happens if the ICMP echo request arrives at FortiGate when there is no session yet?

    <p>FortiGate uses the best route to the source IP-address.</p> Signup and view all the answers

    What does FortiGate remember about the interface to source?

    <p>The interface to route the return packets through.</p> Signup and view all the answers

    What is the result of the return packet arriving through a different interface?

    <p>The result is asymmetric routing, where the return traffic follows a different path than the originating traffic.</p> Signup and view all the answers

    What is the purpose of routing traffic symmetrically in FortiGate?

    <p>To ensure that the same route path is used for both directions of the traffic (symmetric routing).</p> Signup and view all the answers

    What is the default gateway for the local workstation in the example shown on this slide?

    <p>The default gateway for the local workstation is 10.1.0.254.</p> Signup and view all the answers

    Where does the ICMP echo reply go first after arriving at the local workstation?

    <p>The ICMP echo reply goes to the local router first.</p> Signup and view all the answers

    Which interface does the return packet arrive at in the example shown on this slide?

    <p>The return packet arrives at FortiGate port2.</p> Signup and view all the answers

    What is the result of FortiGate accepting the return packet that arrives through a different interface?

    <p>The result is asymmetric routing, where the return traffic follows a different path than the originating traffic.</p> Signup and view all the answers

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser