Exam NSE7 topic 1 question 2 discussion

Actual exam question from Fortinet's NSE7

Question #: 3
Topic #: 2

Examine the following partial output from a sniffer command; then answer the question below.
# diagnose sniff packet any icmp 4
interfaces=[any]
filters=[icmp]
2.101199 wan2 in 192.168.1.110 -> 4.2.2.2: icmp: echo request
2.1011400 wan1 out 172.17.87.16 -> 4.2.2.2: icmp: echo request
.....
2.123500 wan2 out 4.2.2.2 -> 192.168.1.110: icmp: echo reply
244 packets received by filter
5 packets dropped by kernel
What is the meaning of the packets dropped counter at the end of the sniffer?

A. Number of packets that didn’t match the sniffer filter.
B. Number of total packets dropped by the FortiGate.
C. Number of packets that matched the sniffer filter and were dropped by the FortiGate.
D. Number of packets that matched the sniffer filter but could not be captured by the sniffer.

Show Suggested Answer

Suggested Answer: D 🗳️

by Clement at April 20, 2020, 5:50 p.m.