wan1 remains physically up and its adjacent gateway answers ping, but internet access beyond that gateway has failed. The preferred static default remains installed. What should the design add?

Choose the single best answer.

A.A lower distance on the already preferred default only.
B.A larger firewall policy ID.
C.A connected route for every internet host.
D.Remote path monitoring with configured route withdrawal.

Show the answer and explanation

✓ Correct answer

Remote path monitoring with configured route withdrawal.

A health check that observes the failed path can drive withdrawal/exclusion. Distance chooses among available routes but does not detect a remote outage. Policy numbering and connected routes for remote internet hosts do not solve that measurement gap.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.