NSE 7 – SD-WAN 7.2 — Question 20

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

Answer options

• A. By default, FortiGate does not check if the selected member has a valid route to the destination.
• B. You must configure each local-out feature individually, to use SD-WAN.
• C. By default, local-out traffic does not use SD-WAN.
• D. FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local-out traffic.

Correct answer: B, C

Explanation

Option B is correct because each local-out feature indeed requires individual configuration to leverage SD-WAN effectively. Option C is also correct as, by default, local-out traffic does not engage SD-WAN, making it necessary to configure it explicitly. Options A and D are incorrect because FortiGate does check for valid routes and does consider the source address when matching SD-WAN rules.