NSE 7 – SD-WAN 7.0 — Question 39

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

Answer options

• A. FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local-out traffic.
• B. By default, local-out traffic does not use SD-WAN.
• C. By default, FortiGate does not check if the selected member has a valid route to the destination.
• D. You must configure each local-out feature individually, to use SD-WAN.

Correct answer: B, D

Explanation

The correct answers are B and D because, by default, local-out traffic does not use SD-WAN (B), and each local-out feature must be individually configured to apply SD-WAN (D). Option A is incorrect as FortiGate does consider the source address for SD-WAN rules, and option C is wrong because FortiGate does check for valid routes by default.