A route lookup for the destination alone shows wan1, but a real Finance client consistently uses wan2. A source-specific policy route is configured. Which check best reproduces the live decision?

Choose the single best answer.

A.Compare only the default-route distances again.
B.Change the firewall policy number to 1.
C.Assume the capture is wrong because the static table is authoritative for every mechanism.
D.Include the source/ingress/protocol context and inspect diagnose firewall proute list.

Show the answer and explanation

✓ Correct answer

Include the source/ingress/protocol context and inspect diagnose firewall proute list.

Policy routing can match source, ingress and service context before ordinary destination routing. A destination-only lookup can miss those conditions. Rechecking only default distances, renumbering a policy or dismissing the capture ignores the configured steering mechanism.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.