StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Static routing

Practice question 355 of 440 · hard

An application fails through a firewall. Which sequence best separates no-route, wrong-route, RPF and policy-deny causes?

Choose the single best answer.

  1. A.Inspect only configured destination routes and ignore source validation and steering.
  2. B.Treat an active destination route as proof the firewall policy permitted traffic.
  3. C.Check tuple/RPF/steering, active route, matching policy and replies.
  4. D.Test only an old established NAT session after changing the routing design.
Show the answer and explanation

✓ Correct answer

  • Check tuple/RPF/steering, active route, matching policy and replies.

Following the tuple, source-validation and steering evidence separates forwarding failures before checking authorization and replies. Configuration alone does not prove route installation or policy acceptance; an old session can retain earlier state.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.