A private application requires encrypted tunnels while public web traffic should leave directly through internet WANs. Which design expresses these separate requirements?

Choose the single best answer.

A.Use certificate inspection as a substitute for IPsec transport encryption.
B.Use an IPsec overlay for private destinations and appropriate SD-WAN rules/routes for direct internet access.
C.Assume membership encrypts every physical WAN.
D.Send every private destination to a blackhole.

Show the answer and explanation

✓ Correct answer

Use an IPsec overlay for private destinations and appropriate SD-WAN rules/routes for direct internet access.

An encrypted overlay and direct-internet steering can coexist with suitable routing/policies. Physical SD-WAN membership is not encryption, blackholing removes access, and TLS certificate inspection does not create site-to-site network encryption.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.