Which two statements are correct about the health check status on this FortiGate device?

Exhibit.

The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device.

Which two statements are correct about the health check status on this FortiGate device? (Choose two.)
A . The health-check VPN_PING orders the members according to the lowest jitter.
B . The interface T_INET_1 missed one SLA target.
C . There is no SLA criteria configured for the health-check Level3_DNS.
D . The interface T_INET_0 missed three SLA targets.

View Answer

Answer: AC

Explanation:

According to the FortiGate / FortiOS 6.4.2 Administration Guide, the health check status command displays the status of the health check probes for each SD-WAN member interface.

The output includes the following information:

state: the current state of the interface, either alive or dead

packet-loss: the percentage of packets lost during the health check

latency: the average round-trip time in milliseconds

jitter: the variation in latency

mos: the mean opinion score, a measure of voice quality

bandwidth: the available bandwidth in kilobits per second for each direction (up, down, bi) sla map: a bitmap that indicates which SLA criteria are met or failed

Based on the exhibit, the following statements are correct:

The health-check VPN_PING orders the members according to the lowest jitter. This means that the interface with the lowest jitter value is listed first, followed by the next lowest, and so on1. In the exhibit, the order is T_MPLS, T_INET_1, and T_INET_0.

There is no SLA criteria configured for the health-check Level3_DNS. This means that the health check does not use any SLA parameters to determine the state of the interface2. In the exhibit, the sla map value is 0x0 for both port1 and port2, indicating that no SLA criteria are applied.