Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE6_WCS-7.0 Topic 3 Question 8 Discussion

Actual exam question for Fortinet's NSE6_WCS-7.0 exam
Question #: 8
Topic #: 3
[All NSE6_WCS-7.0 Questions]

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, D

Traffic Direction through GWLB Endpoint:

The ingress route table directs inbound traffic to the GWLB through a GWLB endpoint (GWLBe). This endpoint is responsible for directing traffic to the Gateway Load Balancer for further processing (Option B).

GENEVE Encapsulation:

The GWLB encapsulates the inbound traffic using the GENEVE protocol. This encapsulated traffic is then sent to FortiGate instances for security inspection. The use of GENEVE ensures that the original traffic context is preserved and can be analyzed by FortiGate (Option D).

Other Options Analysis:

Option A is incorrect because GWLB does not forward traffic without encapsulation in its dedicated subnet.

Option C is incorrect as the inbound traffic is directed to the GWLB endpoint first, not directly to the application subnet.


AWS Gateway Load Balancer Documentation: AWS GWLB

GENEVE Protocol Overview: GENEVE Protocol

Contribute your Thoughts:

Dorothy
1 months ago
Haha, I bet the exam writers just threw in option A to trip up the candidates. Who would ever expect the GWLB to forward traffic without encapsulation?
upvoted 0 times
...
Jess
1 months ago
I think option C is also true. The exhibit shows that inbound traffic is directed to the application subnet through the GWLB endpoint.
upvoted 0 times
Dannie
23 days ago
You're right, option C is correct. Inbound traffic is directed to the application subnet through a GWLB endpoint.
upvoted 0 times
...
Hoa
23 days ago
I think option D is also true. GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.
upvoted 0 times
...
Reyes
1 months ago
I agree, option B is correct. Inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...
...
Jerry
2 months ago
Hmm, I'm not sure about option D. Encapsulating traffic with GENEVE protocol seems like a lot of unnecessary work for the GWLB.
upvoted 0 times
Galen
20 days ago
Donte: Yeah, I think we can eliminate option D as a possibility.
upvoted 0 times
...
Barrett
23 days ago
User 3: I'm not sure about option D either. It does seem like a lot of extra work for the GWLB.
upvoted 0 times
...
Donte
26 days ago
User 2: I agree with you. Option B does seem to make sense based on the exhibit.
upvoted 0 times
...
Earleen
1 months ago
User 1: I think option B is correct. Inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...
Justa
1 months ago
User 2: Yeah, I agree. Option D does seem like a lot of extra work for the GWLB.
upvoted 0 times
...
Teri
1 months ago
User 1: I think option B is correct. Inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...
...
Sabra
2 months ago
I believe option D is also true. GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.
upvoted 0 times
...
Wai
2 months ago
I agree with Rose. Option B makes sense based on the exhibit.
upvoted 0 times
...
Lindsey
3 months ago
Option B is clearly the correct answer. The exhibit shows that inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
Gaston
2 months ago
Yes, that's right. The exhibit clearly shows that traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...
Giovanna
2 months ago
I agree, option B is correct. Inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...
...
Rose
3 months ago
I think option B is correct because inbound traffic is directed to the GWLB through a GWLB endpoint.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77