Exam NSE4-5.4 topic 1 question 92 discussion

B. and C. RPF Check Explanation: Strict RPF: The incoming interface must exactly match the one used to reach the source address. Loose RPF: The incoming interface must be one of the interfaces used to reach the source address. Analysis: In this scenario, both strict and loose RPF checks will allow the traffic because: The traffic is destined for a directly connected network (172.16.32.0/24) on port2. This means the traffic enters the FortiGate through the correct interface. The source address (192.168.32.15) is irrelevant for RPF checks in this case. Since the destination is directly connected, the FortiGate doesn't need to perform any routing lookup to determine the outgoing interface. Therefore, both strict and loose RPF checks will allow the traffic to pass through the FortiGate. Key Points: RPF checks are primarily designed to prevent spoofed traffic. When the destination is directly connected, RPF checks are less stringent. Understanding the network topology and traffic flow is crucial for proper RPF configuration.

correct answer is B & C Reference: Fortinet Training Institute. FCP - Fortigate 7.4 Administrator Sample Questions.

B and C. https://extreme-networks.my.site.com/ExtrArticleDetail?an=000086726

the correct answer is B and C