NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate is configured with BGP and OSPF. The administrator wants to ensure that routes learned via BGP are redistributed into OSPF, but only specific prefixes. Which three components are needed? (Select THREE.)
⚠ Common exam trap
Candidates often confuse distribute lists (which filter OSPF routes received from neighbors) with route maps used for redistribution filtering, leading them to select option E instead of understanding that redistribution filtering requires a route map referencing a prefix list.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A route map that references the prefix list and sets OSPF parameters
Option D is correct because a prefix list is the mechanism used to match the specific BGP-learned prefixes that should be redistributed into OSPF, allowing granular control over which networks are permitted. Option A is correct because a route map is required to reference that prefix list and apply the desired OSPF parameters (such as metric, metric-type, or tag) to the redistributed routes. Option B is correct because redistribution must be configured under the OSPF routing process with the route map applied, for example using 'config redistribute bgp' and 'set route-map <name>' under 'config router ospf', so that only the matched BGP routes are injected into OSPF. Option C is not needed because a VRF is only required to separate routing tables in multi-tenant or overlapping-address scenarios, not for basic route redistribution between BGP and OSPF. Option E is not needed because a distribute list filters OSPF routes being received or advertised within OSPF, not BGP routes being redistributed into OSPF.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A route map that references the prefix list and sets OSPF parameters
Why this is correct
The route map is the filtering and attribute-setting mechanism: it references the prefix list that matches only the specific prefixes, then sets the OSPF parameters applied during redistribution. This satisfies the requirement to redistribute only chosen BGP prefixes into OSPF.
- ✓
Redistribution of BGP into OSPF under router ospf with the route map applied
Why this is correct
Redistribution must be enabled under router ospf, where the BGP source protocol is named and the route map is attached. This binds the filtering to the OSPF process, ensuring only the prefixes permitted by the route map enter OSPF.
- ✗
A VRF to separate the routing tables
Why it's wrong here
A VRF partitions a FortiGate into separate routing tables, which is unnecessary when BGP and OSPF share one table and only prefix selection is wanted. Redistribution filtering uses a route map on the OSPF redistribute command. VRFs suit multi-tenant or overlapping-address designs.
- ✓
A prefix list to match the desired BGP routes
Why this is correct
A prefix list supplies the granular match criteria that the route-map references, letting OSPF redistribute only the chosen BGP prefixes rather than the full table. Without it, redistribution would leak every learned route into OSPF, so it directly satisfies the 'only specific prefixes' constraint.
- ✗
A distribute list in OSPF to filter incoming routes
Why it's wrong here
A distribute list filters routes entering or leaving OSPF, so it cannot select which BGP prefixes get redistributed. Redistribution filtering needs a route map applied to the OSPF redistribute statement. Distribute lists are correct for controlling OSPF-learned routes within the OSPF domain.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 718 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.