StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · SD-WAN

Practice question 380 of 440 · medium

The selected member changes from wan1 to wan2 and the partner’s IP allowlist starts rejecting new sessions. What should be checked?

Choose the single best answer.

  1. A.Whether an unrelated HTTPS inspection profile uses certificate or deep inspection.
  2. B.The new public source address/NAT mapping and partner allowlist.
  3. C.Only whether the SD-WAN rule title is unchanged.
  4. D.Whether wan2 has a higher interface index.
Show the answer and explanation

✓ Correct answer

  • The new public source address/NAT mapping and partner allowlist.

Different WANs can present different public source identities. Routing success does not guarantee partner authorization after that change. Rule titles, interface index and an unrelated inspection mode do not repair the allowlist mismatch.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.