ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE4_FGT-6.4 All Questions

View all questions & answers for the NSE4_FGT-6.4 exam
Go to Exam

Exam NSE4_FGT-6.4 topic 1 question 69 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4
Question #: 69
Topic #: 1
[All NSE4_FGT-6.4 Questions]

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

  • A. The debug flow is of ICMP traffic
  • B. The default route is required to receive a reply
  • C. A firewall policy allowed the connection
  • D. A new traffic session is created
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
by phototrait at June 30, 2021, 6:28 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
phototrait
Highly Voted 4 years, 1 month ago
A & D is correct, not C
upvoted 26 times
JannJann
3 years, 11 months ago
AD is correct. Good read for your guys. https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/54688/debugging-the-packet-flow
upvoted 4 times
JannJann
3 years, 11 months ago
SAMPLE: SYN sent and a new session is allocated: id=20085 trace_id=209 func=resolve_ip_tuple line=2799 msg="allocate a new session-00000e90"
upvoted 2 times
...
...
...
phototrait
Highly Voted 4 years, 1 month ago
A & C is correct : proto=1 -> icmp / allocate a new sesion
upvoted 5 times
luiscsiscotec
3 years, 11 months ago
what is your reference about "A and C"?
upvoted 1 times
...
...
NicolaeEast
Most Recent 2 years, 11 months ago
Selected Answer: AD
Proto 1 is icmp. Obviously a new session was created. The ping is being sent to the gateway from a local device so no policy is needed. "gw-10.0.1.250 via root" Fortigate Infrastructure 7.0 pg 358-360
upvoted 1 times
...
Chdavid33
3 years, 4 months ago
A y D is correct!
upvoted 1 times
...
andrewc74
3 years, 4 months ago
If C is not correct, why is there a return traffic in reverse direction from 10.0.1.250 back to 10.0.1.10?
upvoted 1 times
...
Nirvanero94
3 years, 5 months ago
Selected Answer: AD
A & D is correct, not C
upvoted 1 times
...
Ceajance
3 years, 6 months ago
Selected Answer: AD
A & D is correct, not C
upvoted 1 times
...
AJVG
3 years, 6 months ago
A D is correct
upvoted 1 times
...
lrosadini
3 years, 6 months ago
A&D A=proto1=ICMP=PING D=msg="Allocate a new session"
upvoted 2 times
...
forti_Ctes
3 years, 10 months ago
A & D are corerct
upvoted 2 times
...
forti_Ctes
3 years, 11 months ago
A & D is correct
upvoted 1 times
...
luiscsiscotec
3 years, 11 months ago
B & D is correct.
upvoted 1 times
...
moneim
3 years, 12 months ago
A and C ,, reply traffic is received so traffic must has been allowed by a firewall policy
upvoted 2 times
moneim
3 years, 11 months ago
looking again a the log, it seems that the client is pinging the GW in the same subnet, son firewall policy is needed to allow such communication. Answer should be A,D as mentioned by others
upvoted 4 times
Seph1
3 years, 11 months ago
Why do you think it`s a gateway? How can you know it?
upvoted 1 times
Anis_chak
3 years, 9 months ago
"gw-10.0.1.250 via root"
upvoted 2 times
...
...
...
...
Gape4
4 years ago
A & D is correct. No Doubt.
upvoted 3 times
...
JackeD
4 years, 1 month ago
A and D is correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel