Exam NSE7 topic 1 question 5 discussion

Actual exam question from Fortinet's NSE7

Question #: 5
Topic #: 2

A FortiGate's port1 is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

A. Both session have the local flag on.
B. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.
C. One session has the proxy flag on, the other one does not.
D. One of the sessions has the IP address of port2 as the source IP address.

Show Suggested Answer

Suggested Answer: BC 🗳️

by Raul_Omar at Oct. 6, 2020, 8:03 p.m.