NSE 8 – Network Security Expert (812) — Question 6

A retail customer with a FortiADC HA cluster load balancing five webservers in L7 Full NAT mode is receiving reports of users not able to access their website during a sale event. But for clients that were able to connect, the website works fine.
CPU usage on the FortiADC and the web servers is low, application and database servers are still able to handle more traffic, and the bandwidth utilization is under 30%.
Which two options can resolve this situation? (Choose two.)

Answer options

• A. Change the persistence rule to LB_PERSIS_SSL_SESS_ID
• B. Add more web servers to the real server pool
• C. Disable SSL between the FortiADC and the web servers
• D. Add a connection-pool to the FortiADC virtual server

Correct answer: A

Explanation

Changing the persistence rule to LB_PERSIS_SSL_SESS_ID can help maintain session consistency, which is crucial during high-traffic events. Adding more web servers could also alleviate some traffic issues, but since the CPU usage is low, this may not be necessary. Disabling SSL might not resolve the access issues and could expose sensitive data, while adding a connection-pool may not directly address the problem at hand.