Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Fortinet Discussions

Exam NSE7 topic 1 question 5 discussion

Actual exam question from Fortinet's NSE7
Question #: 4
Topic #: 2
[All NSE7 Questions]

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list
----FSSO logons----
IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB
The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

  • A. The IP address recorded in the logon event for the user STUDENT.
  • B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.
  • C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.
  • D. The reserve DNS lookup for the IP address 192.168.3.1.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Raul_Omar at Oct. 7, 2020, 2:32 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
dsticht
6 months, 1 week ago
The reason B is the right answer is that it is most commonly the root of your problem.
upvoted 1 times
...
dsticht
6 months, 1 week ago
FSSO documentation does not mention reverse DNS, but does mention A records. Checking the source IP from some traffic won't necessarily point you to the problem. DNS is almost certainly the issue, so B.
upvoted 1 times
...
markluistro
1 year, 1 month ago
B 100%
upvoted 1 times
...
ElDTO91
1 year, 7 months ago
It makes sense more C than B.
upvoted 2 times
...
FortiSherlock
2 years, 7 months ago
Sounds a bit weird. My first guess would have been C) because the FortiGate could apply SNAT and change the original source IP of the workstation.
upvoted 2 times
...
Amr9894
3 years, 5 months ago
are you sure Raul_Omar is B the answer
upvoted 1 times
...
Raul_Omar
3 years, 6 months ago
The answer could be B
upvoted 2 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel