Fortinet Exam NSE7_NST-7.2 Topic 1 Question 16 Discussion

Actual exam question for Fortinet's NSE7_NST-7.2 exam

Question #: 16
Topic #: 1

Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.

If the priority on route ID _ were changed from 10 to 0, what would happen to traffic matching that user session?

AThe session would be deleted, and the client would need to start a new session.

BThe session would remain in the session table, but its traffic would now egress from both port1. andport2.

CThe session would remain in the session table, and its traffic would egress from port2.

DThe session would remain in the session table, and its traffic would egress from port1.

Show Suggested Answer

Suggested Answer: C

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer:

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Fortinet Network Security 7.2 Support Engineer Documentation

Fortinet Firewall Protocol State Documentation

by Marguerita at Oct 18, 2024, 07:20 PM

Limited Time Offer

25%

Off

Get Premium NSE7_NST-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Olene

17 minutes ago

Haha, can you imagine the poor user trying to figure out why their internet suddenly stopped working? 'Did I do something wrong?' No, Olene, it's just the routing table playing tricks on you.

upvoted 0 times

...

Sena

3 days ago

Oh, I know this one! The session would remain in the table, but the traffic would now egress from a different port. That makes sense, given the way routing works on the FortiGate.

upvoted 0 times

...

Gussie

22 days ago

Wait, so the session would be deleted if the priority changes? That seems like a bit of an extreme reaction. Hopefully, there's a more graceful way to handle this.

upvoted 0 times

...

Crista

28 days ago

Hmm, this seems tricky. If the priority on the route ID changes, I wonder how that would affect the existing session. I'll have to think this through carefully.

upvoted 0 times

Daryl

9 days ago

A) The session would be deleted, and the client would need to start a new session.

upvoted 0 times

...

Martin

29 days ago

I'm not sure, but I think the session would remain in the session table, and its traffic would egress from port2.

upvoted 0 times

...

Hermila

1 months ago

I disagree, I believe the session would remain in the session table, but its traffic would now egress from both port1 and port2.

upvoted 0 times

...

Deonna

1 months ago

I think if the priority on route ID _ were changed from 10 to 0, the session would be deleted.

upvoted 0 times

...