Exam NSE4_FGT-7.2 topic 1 question 104 discussion

I can't see questions 105-109????

A. Execute a debug flow. FortiGate Infrastructure 7.2 Study Guide (p.357): "If FortiGate is dropping packets, can a packet capture (sniffer) be used to identify the reason? To find the cause, you should use the debug (packet) flow." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

Answer is A

I can't see questions 105-109

A. Executing a debug flow will help identify if packets are dropped due to firewall policies or security checks.

Same here, can see up to 104

which answer should be used during the exam? suggested answer or the answer from Community vote distribution?

Interface is set to any and is checking all traffic on port 80. The webserver is directly connected to the FortiGate. We would see traffic destined to port 80 with this sniffer. The only thing that makes sense is A.

The answer is D, not A. It's not mentionned the packet is blocked somewhere. As we can see the sniffer command, we capture packet on all interfaces. Packet arrives on the interface, is captured before being blocked if a policy exist. We can see on the capture thre are syn flood send by the host, but we cannot see the reply from the web server (reply from port 80 to host destination port). If the server replies (sysn ack), It should be on the capture. We need to check on the server why there is no response. That's why we need to Run a sniffer on the web server (answer D).

Answer is A, because sniffer shows the ingressing and egressing packets . but we cannot see dropped packets by fortigate in a sniffer. Debugging can show the packets are not entering for any reasons caused by fortigate. So believe if a packed is reached to fortigate and dropped , debug will show us. Debug flow will definitely provide the reason why the packets are dropped. Infrastructure guide 7.2, pages 357

The answer is A