ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE7_EFW-7.0 All Questions

View all questions & answers for the NSE7_EFW-7.0 exam
Go to Exam

Exam NSE7_EFW-7.0 topic 1 question 23 discussion

Actual exam question from Fortinet's NSE7_EFW-7.0
Question #: 23
Topic #: 1
[All NSE7_EFW-7.0 Questions]

Refer to the exhibit, which shows the output of a diagnose command.

What can you conclude from the output shown in the exhibit? (Choose two.)

  • A. This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.
  • B. This is an expected session created by the IPS engine.
  • C. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.200.1.1.
  • D. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.0.1.10.
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
by Hesoyam at Jan. 4, 2023, 8:46 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Hesoyam
Highly Voted 1 year, 7 months ago
Selected Answer: AD
Correct answers are A and D.
upvoted 6 times
...
cedigger
Most Recent 1 year ago
Selected Answer: AD
I agree with A and D. Because B and C are wrong. But can anyone explain how I can see this is a pinhole session? I don't get it.
upvoted 1 times
piotrb
1 year ago
see page 115 in the study guide.
upvoted 1 times
...
cedigger
1 year ago
Nevermind I get it. The flag complex means the session is handeled by a session helper!
upvoted 2 times
...
...
certifi46
1 year, 3 months ago
Selected Answer: AD
A and D
upvoted 1 times
...
Quetchup
1 year, 4 months ago
Selected Answer: AD
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 110, 111, 115
upvoted 3 times
...
NZhang
1 year, 5 months ago
A&D are correct
upvoted 1 times
...
djela45
1 year, 5 months ago
I stand corrected: A&D are correct
upvoted 2 times
...
fcatena
1 year, 5 months ago
A & D correct
upvoted 1 times
...
Tony87
1 year, 6 months ago
A and C
upvoted 1 times
...
Seph1
1 year, 6 months ago
Selected Answer: AD
A & D - are correct. 10.0.1.10 is a gateway and next-hop IP
upvoted 1 times
Bsdx
1 year, 5 months ago
10.0.1.10 is the original source, the output shows the reply packet towards the gateway 10.200.1.1 and destinated IP 10.0.1.10 (A,D are correct but your statement is wrong)
upvoted 2 times
...
...
djela45
1 year, 6 months ago
Selected Answer: AC
A & C are correct
upvoted 1 times
...
jjejje
1 year, 6 months ago
Selected Answer: AD
Answer
upvoted 1 times
...
SHASKAN
1 year, 6 months ago
Selected Answer: AD
A & D seem correct
upvoted 1 times
...
harisram
1 year, 6 months ago
A and D are correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel