ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE7 All Questions

View all questions & answers for the NSE7 exam
Go to Exam

Exam NSE7 topic 1 question 5 discussion

Actual exam question from Fortinet's NSE7
Question #: 4
Topic #: 2
[All NSE7 Questions]

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list
----FSSO logons----
IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB
The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

  • A. The IP address recorded in the logon event for the user STUDENT.
  • B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.
  • C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.
  • D. The reserve DNS lookup for the IP address 192.168.3.1.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Raul_Omar at Oct. 7, 2020, 2:32 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
dsticht
1 year, 6 months ago
The reason B is the right answer is that it is most commonly the root of your problem.
upvoted 1 times
...
dsticht
1 year, 6 months ago
FSSO documentation does not mention reverse DNS, but does mention A records. Checking the source IP from some traffic won't necessarily point you to the problem. DNS is almost certainly the issue, so B.
upvoted 1 times
...
markluistro
2 years, 2 months ago
B 100%
upvoted 1 times
...
ElDTO91
2 years, 8 months ago
It makes sense more C than B.
upvoted 2 times
...
FortiSherlock
3 years, 8 months ago
Sounds a bit weird. My first guess would have been C) because the FortiGate could apply SNAT and change the original source IP of the workstation.
upvoted 2 times
...
Amr9894
4 years, 5 months ago
are you sure Raul_Omar is B the answer
upvoted 1 times
...
Raul_Omar
4 years, 7 months ago
The answer could be B
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago