Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Fortinet Exam NSE7_EFW-7.2 Topic 4 Question 20 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 20
Topic #: 4

[All NSE7_EFW-7.2 Questions]

Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.

Which two conclusions can you draw from this con figuration? (Choose two)

A10.1.5.254 is the default gateway of the internal network

BOn failover new primary device uses the same MAC address as the old primary

CThe VRRP domain uses the physical MAC address of the primary FortiGate

DBy default FortiGate B is the primary virtual router

Show Suggested Answer

Suggested Answer: A, B

The Virtual Router Redundancy Protocol (VRRP) configuration in the exhibit indicates that 10.1.5.254 is set as the virtual IP (VRIP), commonly serving as the default gateway for the internal network (A). With vrrp-virtual-mac enabled, both FortiGates would use the same virtual MAC address, ensuring a seamless transition during failover (B). The VRRP domain does not use the physical MAC address (C), and the priority settings indicate that FortiGate-A would be the primary router by default due to its higher priority (D).

by Alaine at Aug 08, 2024, 02:39 PM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Meghan

4 months ago

I bet the answer is not as straightforward as it seems. These certification exams love to throw curveballs.

upvoted 0 times

...

Hailey

4 months ago

Haha, 'primary virtual router' - that's a new one. FortiGate must have a sense of humor.

upvoted 0 times

Gwenn

4 months ago

I think options C and D are the correct conclusions.

upvoted 0 times

...

...

Bettina

4 months ago

Hmm, the MAC address confusion is interesting. I wonder if that's a trick question.

upvoted 0 times

Stevie

4 months ago

B) On failover new primary device uses the same MAC address as the old primary

upvoted 0 times

...

Jesus

4 months ago

A) 10.1.5.254 is the default gateway of the internal network

upvoted 0 times

...

...

Jaime

4 months ago

I'm not sure about option D, but I think option C is also valid. The VRRP domain using the physical MAC address of the primary FortiGate makes sense to me.

upvoted 0 times

...

Harley

4 months ago

I agree with Leontine, option A seems logical. But I also think option D could be correct because FortiGate B is mentioned as the primary virtual router.

upvoted 0 times

...

Louann

4 months ago

Looks like VRRP is configured for redundancy, but the question is a bit tricky. I'll have to think this through carefully.

upvoted 0 times

Kris

3 months ago

Let's go with A and C then. It's always good to double check before submitting.

upvoted 0 times

...

Colette

3 months ago

I'm leaning towards option C as well, since VRRP usually uses the primary MAC address.

upvoted 0 times

...

Ceola

4 months ago

I think option A is correct because 10.1.5.254 is usually the default gateway.

upvoted 0 times

...

Paola

4 months ago

Agreed, the question seems a bit tricky. Let's break it down.

upvoted 0 times

...

...

Leontine

4 months ago

I think option A is correct because the IP address 10.1.5.254 is commonly used as a default gateway.

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77