Exam FCP_WCS_AD-7.4 Topic 3 Question 8 Discussion
Actual exam question for Fortinet's FCP_WCS_AD-7.4 exam
Question #: 8
Topic #: 3
Question #: 8
Topic #: 3
Refer to the exhibit.
Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)
Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)
Suggested Answer: B,D Vote an answer
Traffic Direction through GWLB Endpoint:
The ingress route table directs inbound traffic to the GWLB through a GWLB endpoint (GWLBe). This endpoint is responsible for directing traffic to the Gateway Load Balancer for further processing (Option B).
GENEVE Encapsulation:
The GWLB encapsulates the inbound traffic using the GENEVE protocol. This encapsulated traffic is then sent to FortiGate instances for security inspection. The use of GENEVE ensures that the original traffic context is preserved and can be analyzed by FortiGate (Option D).
Other Options Analysis:
Option A is incorrect because GWLB does not forward traffic without encapsulation in its dedicated subnet.
Option C is incorrect as the inbound traffic is directed to the GWLB endpoint first, not directly to the application subnet.
Reference:
AWS Gateway Load Balancer Documentation: AWS GWLB
GENEVE Protocol Overview: GENEVE Protocol
The ingress route table directs inbound traffic to the GWLB through a GWLB endpoint (GWLBe). This endpoint is responsible for directing traffic to the Gateway Load Balancer for further processing (Option B).
GENEVE Encapsulation:
The GWLB encapsulates the inbound traffic using the GENEVE protocol. This encapsulated traffic is then sent to FortiGate instances for security inspection. The use of GENEVE ensures that the original traffic context is preserved and can be analyzed by FortiGate (Option D).
Other Options Analysis:
Option A is incorrect because GWLB does not forward traffic without encapsulation in its dedicated subnet.
Option C is incorrect as the inbound traffic is directed to the GWLB endpoint first, not directly to the application subnet.
Reference:
AWS Gateway Load Balancer Documentation: AWS GWLB
GENEVE Protocol Overview: GENEVE Protocol
by Adrian at Jan 01, 2025, 03:50 PM
Contact Us
If you have any question please leave me your email address, we will reply and send email to you in 12 hours.
Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday
Support: Contact now
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).