FortiGate's Routing and Monitoring
30 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Which protocol state value indicates that the TCP three-way handshake is completed?

  • 2
  • 11 (correct)
  • 1
  • 0

What does the log flag indicate?

  • The session originates from FortiGate
  • The session is flagged as dirty
  • The session requires authentication
  • The session is being logged (correct)

Which type of NAT is indicated in the portion that shows the type of NAT?

  • Source
  • Destination
  • Both source and destination (correct)
  • None of the above

What does sdwan_service_id equal to 0 indicate?

<p>The session matched the SD-WAN implicit rule (D)</p> Signup and view all the answers

What does the ndr flag indicate?

<p>The session will be checked by IPS signature (B)</p> Signup and view all the answers

What does proto_state=00 indicate for ICMP?

<p>The ICMP session has no state (A)</p> Signup and view all the answers

What does the redir flag indicate?

<p>The session is being processed by an application layer proxy (C)</p> Signup and view all the answers

What does the npd flag indicate?

<p>The session cannot be offloaded to NPU (B)</p> Signup and view all the answers

What does the npu flag indicate?

<p>The session can be offloaded to NPU (A)</p> Signup and view all the answers

What is the purpose of may_dirty sessions in FortiGate?

<p>May_dirty sessions are created after matching a firewall policy with accept as action (D)</p> Signup and view all the answers

Which flag is used by FortiGate to identify entries in the FIB used for routing health-check traffic?

<p>proto=17 (D)</p> Signup and view all the answers

What command displays the total number of sessions in the current V-Dom?

<p>get system session status (A)</p> Signup and view all the answers

What information does the command get system session list provide?

<p>Protocol, source IP-address, destination IP-address, and port (C)</p> Signup and view all the answers

What does the TCP session table entry display?

<p>All of the above (D)</p> Signup and view all the answers

What does the redir flag indicate?

<p>Redirected traffic (A)</p> Signup and view all the answers

What does the npu flag indicate?

<p>Network processing unit flag (A)</p> Signup and view all the answers

What does the log flag indicate?

<p>Logged traffic (A)</p> Signup and view all the answers

What does the npd flag indicate?

<p>Network processing delay flag (A)</p> Signup and view all the answers

Which type of NAT is indicated in the portion that shows the type of NAT?

<p>All of the above (D)</p> Signup and view all the answers

Which protocol state value indicates that the TCP three-way handshake is completed?

<p>02 (D)</p> Signup and view all the answers

Which protocol flag is used by FortiGate to identify entries in the FIB used for routing health-check traffic?

<p>proto=17 (D)</p> Signup and view all the answers

What command displays the total number of sessions in the current V-Dom?

<p>get system session status (A)</p> Signup and view all the answers

What command provides a brief summary of each session?

<p>get system session list (A)</p> Signup and view all the answers

What information is highlighted in the example output of a single session table entry?

<p>IP protocol number and the protocol state (C)</p> Signup and view all the answers

What does the FortiGate session table contain?

<p>Detailed information about every IP connection (B)</p> Signup and view all the answers

What does the command 'diagnose sys session list' display?

<p>Example output of a single session table entry (A)</p> Signup and view all the answers

What does the flag 'proto=17' have to do with UDP?

<p>It identifies entries in the FIB used for routing health-check traffic (B)</p> Signup and view all the answers

What information does the command 'get system session list' include?

<p>Protocol, source IP-address, destination IP-address, and port (C)</p> Signup and view all the answers

What can be used to filter the output of the command 'get system session list'?

<p>grep utility (A)</p> Signup and view all the answers

What does the flag 'proto_state=00' indicate for ICMP?

<p>ICMP traffic is blocked (C)</p> Signup and view all the answers

More Like This

Use Quizgecko on...
Browser
Browser