StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Static routing

Practice question 342 of 440 · hard

A higher-distance backup route to a source subnet exists only as a candidate. Why may it fail to satisfy feasible-path RPF for packets arriving through that backup interface?

Choose the single best answer.

  1. A.Feasible RPF compares firewall policy sequence only.
  2. B.Higher distance means the route has a longer destination prefix.
  3. C.Source validation requires destination NAT first.
  4. D.It may not be installed as a usable return path.
Show the answer and explanation

✓ Correct answer

  • It may not be installed as a usable return path.

RPF depends on eligible source-routing evidence, not simply configuration existence. Higher distance can leave a backup unselected. Policy sequence, prefix length and DNAT are separate mechanisms and do not explain this candidate-versus-installed distinction.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.