Fortinet Exam FCSS_NST_SE-7.4 Topic 4 Question 1 Discussion

Actual exam question for Fortinet's FCSS_NST_SE-7.4 exam

Question #: 1
Topic #: 4

[All FCSS_NST_SE-7.4 Questions]

Refer to the exhibit.

Assuming a default configuration, which three statements are true? (Choose three.)

AStrict RPF is enabled by default.

BUser B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

CUser A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

DUser B: Pass. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.

EUser C: Fail. There is no route to 10.0.4.63 using port1 in the touting table.

Show Suggested Answer

Suggested Answer: B, D, E

by Kanisha at Oct 24, 2024, 10:51 PM

Limited Time Offer

25%

Off

Get Premium FCSS_NST_SE-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cristy

8 months ago

This question is a piece of cake! Of course, I knew the answers without even looking at the exhibit. RPF is my middle name!

upvoted 0 times

...

Krystina

8 months ago

E is correct. There is no route to 10.0.4.63 using port1 in the routing table.

upvoted 0 times

Estrella

7 months ago

User C: Fail. There is no route to 10.0.4.63 using port1 in the routing table.

upvoted 0 times

...

Kayleigh

7 months ago

User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

upvoted 0 times

...

Anika

7 months ago

User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

upvoted 0 times

...

Kristel

8 months ago

B is correct. There is no route to 95.56.234.24 using wan2 in the routing table.

upvoted 0 times

...

Helene

8 months ago

I agree with Cecilia. Enabling Strict RPF by default helps prevent IP spoofing attacks.

upvoted 0 times

...

Brock

8 months ago

C is the correct answer. The default static route through wan1 will pass the RPF check regardless of the source IP address.

upvoted 0 times

Lang

7 months ago

User C: Fail. There is no route to 10.0.4.63 using port1 in the routing table.

upvoted 0 times

...

Darrin

7 months ago

User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

upvoted 0 times

...

Francis

7 months ago

User C: Fail. There is no route to 10.0.4.63 using port1 in the routing table.

upvoted 0 times

...

Vivienne

8 months ago

User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

upvoted 0 times

...

Lavonna

8 months ago

User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

upvoted 0 times

...

Maile

8 months ago

User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

upvoted 0 times

...

Cecilia

8 months ago

I think statement A is true because Strict RPF is usually enabled by default for security purposes.

upvoted 0 times

...