Exam NSE4_FGT-7.0 topic 1 question 62 discussion

Actual exam question from Fortinet's NSE4_FGT-7.0

Question #: 62
Topic #: 1

Refer to the exhibit.
In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.

What should the administrator do next to troubleshoot the problem?

A. Execute a debug flow.
B. Run a sniffer on the web server.
C. Capture the traffic using an external sniffer connected to port1.
D. Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".

Show Suggested Answer

Suggested Answer: A 🗳️

by Fabio6699 at Jan. 11, 2023, 10:03 a.m.

Comments

Submit Cancel

Ruzjio

1 year ago

Selected Answer: A

Answer A is definitly correct

upvoted 2 times

...

kosta_georgiev

1 year ago

Selected Answer: A

Correct answer is A, as from the snippet we can see that the traffic is entering the firewall LAN interface but it is not leaving, most likely because it is blocked and debug of the packet level is needed.

upvoted 3 times

...

Fabio6699

1 year, 1 month ago

Selected Answer: D

D is also correct. Running a sniff using the host IP will show interfaces and whether traffic leaving as well.

upvoted 1 times

Kryten

1 year ago

Same applies to using the port in the sniff...it should show traffic on that port leaving to the webserver. Since it does not, we know that no traffic is leaving the fortigate -> use debug next to see if its dropped.

upvoted 1 times

...