Fortinet Enterprise Firewall 7.6 FCSS_EFW_AD-7.6 OSPF Path Control Redistribution And Resilience Practice Test

Practice Exams:

View All

Fortinet Enterprise Firewall 7.6 FCSS_EFW_AD-7.6 OSPF Path Control Redistribution And Resilience Practice Test

This practice test focuses on ospf path control redistribution and resilience through original applied scenarios aligned to the final published Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator 7.6 blueprint. It is intended for study and does not reproduce live exam content. For broader exam preparation, review the Fortinet FCSS_EFW_AD-7.6 Exam Dumps page.

Question 1

Relecloud is standardizing a FortiOS 7.6 enterprise deployment. Which approach should it use to originate a default route into OSPF only when the intended upstream path is usable? Preserve the existing design unless the requirement says otherwise. Only one site is affected; peer sites are healthy.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference

Correct answer: A

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This directly addresses the stated requirement.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.

Learning point: For this Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator scenario, use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement. Conditional default advertisement avoids attracting traffic to an edge that cannot forward it.

Question 2

A change ticket for Adventure Works states that administrators must redistribute selected static routes into OSPF without leaking every static route. Which choice is correct? Prefer a change that is reversible and easy to verify. The change must be validated on a pilot device before broader rollout.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior

Correct answer: D

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Filtered redistribution controls which external prefixes enter the OSPF domain. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.

Learning point: For this Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator scenario, apply route filtering or a route map to the static-to-OSPF redistribution policy. Filtered redistribution controls which external prefixes enter the OSPF domain.

Question 3

The security team at Fourth Coffee wants to prefer one OSPF path over another without changing the advertised prefix. Which configuration or operational action most directly satisfies that goal? The team needs an auditable result. Existing production IP addressing must remain unchanged.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Adjust the OSPF interface cost according to the intended path preference
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain

Correct answer: B

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
OSPF selects lower-cost paths to a destination. This directly addresses the stated requirement.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.

Learning point: For this Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator scenario, adjust the OSPF interface cost according to the intended path preference. OSPF selects lower-cost paths to a destination.

Question 4

An incident at Coho Winery requires the NOC engineer to retain equal-cost paths when the design intentionally uses ECMP. What should be done first? Use normal enterprise Fortinet administration practice. The resulting configuration must remain centrally auditable.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Adjust the OSPF interface cost according to the intended path preference
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: C

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This directly addresses the stated requirement.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.

Learning point: For this Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator scenario, ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior. Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it.

Question 5

For a FortiGate/FortiManager/FortiAnalyzer 7.6 deployment at Fabrikam Manufacturing, which option correctly addresses the need to avoid a redistribution loop between OSPF and another routing domain? Assume the platform versions are compatible with the feature. A known-good rollback point is available before the change.

Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Adjust the OSPF interface cost according to the intended path preference
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement

Correct answer: D

Explanation

Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Route tagging and filtering provide loop prevention at redistribution boundaries. This directly addresses the stated requirement.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.

Learning point: For this Fortinet NSE 7 – Enterprise Firewall 7.6 Administrator scenario, tag or filter redistributed routes so learned routes are not reintroduced back into their source domain. Route tagging and filtering provide loop prevention at redistribution boundaries.

Question 6

Wingtip Energy has verified basic IP reachability. The remaining requirement is to originate a default route into OSPF only when the intended upstream path is usable. Which action should the team take? No unrelated control should be weakened. The design must preserve the current segmentation boundaries.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference

Correct answer: A

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This directly addresses the stated requirement.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.

Question 7

At Lucerne Publishing, the Fortinet administrator must redistribute selected static routes into OSPF without leaking every static route. Which action best addresses the requirement? The team will validate the result immediately after the change. The team is not allowed to disable the security feature globally.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: E

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Filtered redistribution controls which external prefixes enter the OSPF domain. This directly addresses the stated requirement.

Question 8

During an enterprise firewall change at Bellows College, the team needs to prefer one OSPF path over another without changing the advertised prefix. What should it do? The change is taking place in a controlled maintenance window. The symptom appeared immediately after a planned configuration change.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior

Correct answer: B

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
OSPF selects lower-cost paths to a destination. This directly addresses the stated requirement.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.

Question 9

A production review at Tailspin Toys identifies this requirement: retain equal-cost paths when the design intentionally uses ECMP. Which Fortinet action is most appropriate? Choose the smallest targeted change. Logs from the affected traffic are available for verification.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior

Correct answer: E

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This directly addresses the stated requirement.

Question 10

While troubleshooting at Humongous Insurance, the NOC engineer needs to avoid a redistribution loop between OSPF and another routing domain. What is the best next step? The answer must address the stated cause rather than a different feature. The equivalent configuration works correctly at a separate site.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference

Correct answer: A

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.

Question 11

Margie Travel is standardizing a FortiOS 7.6 enterprise deployment. Which approach should it use to originate a default route into OSPF only when the intended upstream path is usable? Preserve the existing design unless the requirement says otherwise. The change must be reversible within the same maintenance window.

Adjust the OSPF interface cost according to the intended path preference
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: C

Explanation

OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.

Question 12

A change ticket for Northwind Health states that administrators must redistribute selected static routes into OSPF without leaking every static route. Which choice is correct? Prefer a change that is reversible and easy to verify. The device is already synchronized with its central-management database.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Adjust the OSPF interface cost according to the intended path preference
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: E

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Filtered redistribution controls which external prefixes enter the OSPF domain. This directly addresses the stated requirement.

Question 13

The security team at Blue Yonder Airlines wants to prefer one OSPF path over another without changing the advertised prefix. Which configuration or operational action most directly satisfies that goal? The team needs an auditable result. The current routing table contains the expected connected networks.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Adjust the OSPF interface cost according to the intended path preference

Correct answer: E

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
OSPF selects lower-cost paths to a destination. This directly addresses the stated requirement.

Question 14

An incident at Trey Research requires the network operations engineer to retain equal-cost paths when the design intentionally uses ECMP. What should be done first? Use normal enterprise Fortinet administration practice. Basic IP reachability to the remote endpoint has already been verified.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Adjust the OSPF interface cost according to the intended path preference
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: B

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This directly addresses the stated requirement.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.

Question 15

For a FortiGate/FortiManager/FortiAnalyzer 7.6 deployment at Apex Retail, which option correctly addresses the need to avoid a redistribution loop between OSPF and another routing domain? Assume the platform versions are compatible with the feature. Hardware replacement is outside the approved change scope.

Adjust the OSPF interface cost according to the intended path preference
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: D

Explanation

OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Route tagging and filtering provide loop prevention at redistribution boundaries. This directly addresses the stated requirement.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.

Question 16

Proseware Media has verified basic IP reachability. The remaining requirement is to originate a default route into OSPF only when the intended upstream path is usable. Which action should the team take? No unrelated control should be weakened. The requirement applies only to one policy, peer, or managed device group.

Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference

Correct answer: C

Explanation

Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This directly addresses the stated requirement.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.

Question 17

At City Power & Light, the enterprise firewall engineer must redistribute selected static routes into OSPF without leaking every static route. Which action best addresses the requirement? The team will validate the result immediately after the change. The team must avoid broadening administrative trust or permissions.

Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Adjust the OSPF interface cost according to the intended path preference
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: E

Explanation

Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Filtered redistribution controls which external prefixes enter the OSPF domain. This directly addresses the stated requirement.

Question 18

During an enterprise firewall change at VanArsdel, the team needs to prefer one OSPF path over another without changing the advertised prefix. What should it do? The change is taking place in a controlled maintenance window. The design must preserve existing centralized logging and telemetry.

Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement

Correct answer: C

Explanation

Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
OSPF selects lower-cost paths to a destination. This directly addresses the stated requirement.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.

Question 19

A production review at Woodgrove Bank identifies this requirement: retain equal-cost paths when the design intentionally uses ECMP. Which Fortinet action is most appropriate? Choose the smallest targeted change. Production subnets cannot be renumbered as part of this change.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Adjust the OSPF interface cost according to the intended path preference

Correct answer: C

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This directly addresses the stated requirement.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.

Question 20

While troubleshooting at Alpine Ski House, the network operations engineer needs to avoid a redistribution loop between OSPF and another routing domain. What is the best next step? The answer must address the stated cause rather than a different feature. A maintenance window is open, but service interruption must be minimized.

Adjust the OSPF interface cost according to the intended path preference
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: B

Explanation

OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Route tagging and filtering provide loop prevention at redistribution boundaries. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.

Question 21

Datum Corporation is standardizing a FortiOS 7.6 enterprise deployment. Which approach should it use to originate a default route into OSPF only when the intended upstream path is usable? Preserve the existing design unless the requirement says otherwise. The team must preserve existing certificate-trust relationships unless the requirement explicitly changes them.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy

Correct answer: C

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to originate a default route into OSPF only when the intended upstream path is usable.

Question 22

A change ticket for Contoso Finance states that administrators must redistribute selected static routes into OSPF without leaking every static route. Which choice is correct? Prefer a change that is reversible and easy to verify. The change will be reviewed later using the configuration and event audit trail.

Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior

Correct answer: D

Explanation

Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.
Filtered redistribution controls which external prefixes enter the OSPF domain. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to redistribute selected static routes into OSPF without leaking every static route.

Question 23

The security team at Litware Logistics wants to prefer one OSPF path over another without changing the advertised prefix. Which configuration or operational action most directly satisfies that goal? The team needs an auditable result. The chosen approach must continue to work as additional branch sites are added.

Adjust the OSPF interface cost according to the intended path preference
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain

Correct answer: A

Explanation

OSPF selects lower-cost paths to a destination. This directly addresses the stated requirement.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to prefer one OSPF path over another without changing the advertised prefix.

Question 24

An incident at Wide World Importers requires the network security architect to retain equal-cost paths when the design intentionally uses ECMP. What should be done first? Use normal enterprise Fortinet administration practice. A second engineer will verify the result using independent operational evidence.

Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Adjust the OSPF interface cost according to the intended path preference
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior

Correct answer: E

Explanation

Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Route tagging and filtering provide loop prevention at redistribution boundaries. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to retain equal-cost paths when the design intentionally uses ECMP.
Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This directly addresses the stated requirement.

Question 25

For a FortiGate/FortiManager/FortiAnalyzer 7.6 deployment at Relecloud, which option correctly addresses the need to avoid a redistribution loop between OSPF and another routing domain? Assume the platform versions are compatible with the feature. The team requires a deterministic rollback path if validation fails.

Ensure the routes have equal OSPF cost and that the FortiGate ECMP settings support the intended forwarding behavior
Apply route filtering or a route map to the static-to-OSPF redistribution policy
Tag or filter redistributed routes so learned routes are not reintroduced back into their source domain
Adjust the OSPF interface cost according to the intended path preference
Use controlled default-information origination tied to the design and upstream reachability rather than a permanent unconditional advertisement

Correct answer: C

Explanation

Equal-cost OSPF routes can be installed for ECMP when the platform and configuration allow it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Filtered redistribution controls which external prefixes enter the OSPF domain. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Route tagging and filtering provide loop prevention at redistribution boundaries. This directly addresses the stated requirement.
OSPF selects lower-cost paths to a destination. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.
Conditional default advertisement avoids attracting traffic to an edge that cannot forward it. This can be correct in another enterprise firewall scenario, but it does not directly satisfy the requirement to avoid a redistribution loop between OSPF and another routing domain.

Related posts: