Exam FCSS_EFW_AD-7.4 topic 1 question 52 discussion

For me the correct answer is A

FortiGate_B has the network 172.16.1.248/30 directly connected but it is not currently advertised to FortiGate_A via BGP. To dynamically announce this specific network, the administrator must configure a network statement for 172.16.1.248/30 in the BGP configuration of FortiGate_B. There is no need to use redistribute connected or any route-map for this task.

For me B is the correct one. there's why. The correct answer is: B. A BGP route map out for 172.16.1.248/30 on FortiGate_B Here's why: The network 172.16.1.248/30 is directly connected to FortiGate_B. We want to dynamically advertise this specific route to FortiGate_A using BGP. Since both FortiGates are in the same autonomous system (iBGP), they can exchange routes via BGP, so to advertise only this specific route, we need to: Apply a BGP route map (outbound) on FortiGate_B to selectively advertise only the 172.16.1.248/30 route to its BGP neighbor (FortiGate_A). So for me the B is the correct.

When you configure a network statement in BGP, it requires that the exact prefix exists in the routing table (RIB), and is not always reliable when used alone. Fortinet recommends using redistribution with route-maps for connected and static routes. -Aunque FortiGate_B tiene la ruta 172.16.1.248/30 como conectada, y técnicamente podría funcionar la instrucción network, esto no asegura su redistribución de forma dinámica o granular. -No puedes filtrar con precisión lo que se anuncia usando solo network, lo cual sí puedes hacer con route-map + redistribute.

For me the correct answer is A. FortiGate does not advertise connected or static routes by default in BGP. You must either explicitly configure them using network statements or use route redistribution. In this case, the question say "The administrator wants to dynamically add only route 172.16.1.248/30". The route map out is irrelevant since, if network is not announced, this is useless. So I'd go with A