Fortinet Exam NSE7_NST-7.2 Topic 4 Question 25 Discussion

Actual exam question for Fortinet's NSE7_NST-7.2 exam

Question #: 25
Topic #: 4

[All NSE7_NST-7.2 Questions]

Which of the following regarding protocol states is true?

Aproto_state=00 indicates that UDP traffic flows in both directions.

Bproto_state-01 indicates an established TCP session.

Cproto_state=10 indicates an established TCP session.

Dproto state=01 indicates one-way ICMP traffic.

Show Suggested Answer

Suggested Answer: C

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer:

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Fortinet Network Security 7.2 Support Engineer Documentation

Fortinet Firewall Protocol State Documentation

by Trina at May 02, 2025, 04:13 PM

Limited Time Offer

25%

Off

Get Premium NSE7_NST-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rory

1 days ago

I'm pretty sure the correct answer is hidden in some ancient networking tome that's only accessible to the grandmasters of the internet.

upvoted 0 times

...

Nancey

7 days ago

Ah, the age-old question of protocol states. I bet the person who wrote this question is just trying to trick us all.

upvoted 0 times

...

Dawne

11 days ago

Wait, what? These options are all over the place. I'm just going to guess and hope for the best.

upvoted 0 times

...

Arlene

12 days ago

I think the answer is A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Aja

23 days ago

But doesn't proto_state=10 indicate a half-open TCP session?

upvoted 0 times

...

Dulce

1 months ago

I disagree, I believe the correct answer is C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Zachary

1 months ago

Hold up, I'm pretty sure option D is the answer. proto_state=01 means one-way ICMP traffic, not an established TCP session.

upvoted 0 times

Maia

18 days ago

I think you're right, option D is the correct answer.

upvoted 0 times

...

Aja

1 months ago

I think the answer is B) proto_state=01 indicates an established TCP session.

upvoted 0 times

...

Alonzo

1 months ago

No way, option C is the right one. proto_state=10 is for an established TCP session, not B.

upvoted 0 times

...

Titus

1 months ago

I think option B is the correct answer. proto_state=01 indicates an established TCP session.

upvoted 0 times

Clay

17 days ago

I believe it's option A. proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Jose

28 days ago

I think it's option C. proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Shawnna

1 months ago

I agree, option B is correct. proto_state=01 indicates an established TCP session.

upvoted 0 times

...