What are three key routing principles of SD-WAN? (Choose three.)

The FortiOS SD-WAN routing logic follows a specific order of operations. First, the device checks for a matching policy route. If one is found, the SD-WAN rules are bypassed. If no policy route matches, the device then evaluates SD-WAN rules. However, SD-WAN rules are only considered if the best route to the destination, as determined by the Forwarding Information Base (FIB), is through an SD-WAN member interface. If the best route is not via an SD-WAN member, the rules are skipped. Finally, when an SD-WAN rule is being processed, it will only consider member interfaces that have a valid, active route to the packet's destination.

A. SD-WAN rules have precedence over the standard routing table, which includes directly connected routes.

C. SD-WAN rules are evaluated before static routes in the standard routing table lookup process.

1. Fortinet FortiOS 7.6.0 SD-WAN Administration Guide, SD-WAN routing, Page 16: "FortiOS checks for a matching policy route first. If one is found, the device routes the packet according to the policy route's settings. If no matching policy route is found, FortiOS checks for a matching SD-WAN rule." This supports option B.

2. Fortinet FortiOS 7.6.0 SD-WAN Administration Guide, SD-WAN routing > Implicit rule, Page 17: "If the best route to the destination is not an SD-WAN member, SD-WAN rules are skipped and the packet is routed based on the routing table." This supports option D.

3. Fortinet FortiOS 7.6.0 SD-WAN Administration Guide, SD-WAN routing, Page 16: "For a member to be selected to route traffic, it must have a route to the destination." This supports option E.

4. Fortinet FortiOS 7.6.0 SD-WAN Administration Guide, SD-WAN routing, Page 16: The documented packet flow shows SD-WAN rules are checked after policy routes but before the routing table lookup (which includes static and connected routes), making options A and C incorrect.