NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate administrator wants to enable load balancing for equal-cost paths to the same destination. The FortiGate has two equal-cost routes via two different next-hop routers. Which feature should the admin enable to load balance traffic across both paths?
⚠ Common exam trap
Candidates often confuse SD-WAN load balancing with ECMP, but SD-WAN is a separate overlay technology that requires SD-WAN zones and performance SLA rules, whereas ECMP is a simple, direct routing-table feature for equal-cost paths without any overlay or application-awareness.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ECMP (Equal Cost Multi-Path)
ECMP (Equal Cost Multi-Path) is the correct feature because it enables a FortiGate to distribute traffic across multiple equal-cost routes to the same destination. When the routing table contains two or more routes with identical administrative distance and metric, ECMP automatically load-balances sessions across those paths using a hash-based algorithm (e.g., source-destination IP hash), without requiring additional configuration beyond enabling the feature globally or per-VDOM.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
BFD (Bidirectional Forwarding Detection)
Why it's wrong here
BFD detects link failures faster, it does not distribute traffic across equal-cost next hops. ECMP load balancing is handled by enabling ECMP in the routing configuration. BFD would be the right choice when sub-second failure detection on a specific path is required, not for spreading flows across two equal-cost routes.
- ✓
ECMP (Equal Cost Multi-Path)
Why this is correct
ECMP installs multiple equal-cost next-hops for the same destination in the routing table, letting the FortiGate distribute traffic across both paths. Without it, only one route is selected, so the second path stays unused despite identical cost.
- ✗
Policy-based routing
Why it's wrong here
Policy-based routing forwards traffic according to configured policy matching criteria, overriding the routing table's equal-cost decision rather than balancing across both next hops. It suits directing specific traffic out a chosen interface. For distributing flows over equal-cost paths, ECMP must be enabled in the routing configuration instead.
- ✗
SD-WAN load balancing
Why it's wrong here
SD-WAN load balancing distributes traffic across SD-WAN members using health checks and SLA rules, not across plain ECMP routes with different next-hop routers. It would be correct when steering traffic over multiple WAN links in an SD-WAN overlay, but the scenario concerns equal-cost routes in the routing table.
Go deeper
Related to this question
About these practice questions
One of 718 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.