TCP Protocol States Quiz

Which digit in the TCP protocol state represents the server-side state?

Third digit
Second digit
Fourth digit
First digit (correct)

What is the value of the TCP state CLOSE_WAIT?

7 (correct)
1
9
0

When does the TCP state value change to 1?

When FortiGate receives the SYN packet
When FortiGate receives the SYN-Ack packet
After the three-way handshake (correct)
When a session is closed by both sides

What is the value of the TCP state FIN_WAIT?

4 (D) Signup and view all the answers

Which digit in the TCP protocol state represents the client-side state?

Second digit (D) Signup and view all the answers

What is the value of the TCP state LISTEN?

9 (B) Signup and view all the answers

When does the TCP state value change to 5?

When a session is closed by both sides (C) Signup and view all the answers

What is the value of the TCP state ESTABLISHED?

1 (C) Signup and view all the answers

When does the TCP state value change to 3?

When FortiGate receives the SYN-Ack packet (C) Signup and view all the answers

What is the value of the TCP state TIME_WAIT?

5 (A) Signup and view all the answers

Which protocol has no state and the protocol state is always 00?

ICMP (D) Signup and view all the answers

What are the two session state values used by FortiGate for UDP traffic?

0 and 1 (D) Signup and view all the answers

What does the 'log' session flag indicate?

Session is being logged (B) Signup and view all the answers

What happens to may_dirty sessions after a change in the firewall policy configuration?

They are removed from the session table (C) Signup and view all the answers

What is the default global session handling setting?

check-all (A) Signup and view all the answers

What does the 'local' session flag indicate?

Session originates from FortiGate or terminates on FortiGate (A) Signup and view all the answers

What happens to a session with the 'block' flag?

It is dropped (C) Signup and view all the answers

What are the possible values for the session state of UDP traffic?

00 and 01 (A) Signup and view all the answers

What does the 'npu' session flag indicate?

Session can be offloaded to NPU (C) Signup and view all the answers

What happens to a session if it must be blocked?

It is flagged as block (D) Signup and view all the answers

Which option is the default setting for the check-policy-option in FortiGate session handling?

check-all (A) Signup and view all the answers

What is the purpose of the check-new option in FortiGate session handling?

To evaluate new sessions against modified policies (C) Signup and view all the answers

What is the most resource-intensive behavior in FortiGate session handling?

check-all (D) Signup and view all the answers

When can you use the check-policy-option in FortiGate session handling?

To handle sessions on a per-policy-level (A) Signup and view all the answers

What does the firewall-session-dirty option do in FortiGate session handling?

Removes policy information from affected sessions (A) Signup and view all the answers

Which setting is global in FortiGate session handling?

check-all (B) Signup and view all the answers

What happens when you enable the check-new option in FortiGate session handling?

New sessions are evaluated against modified policies (C) Signup and view all the answers

When can you use the CLI commands to modify FortiGate session handling behavior?

After policy changes (B) Signup and view all the answers

What is the purpose of the check-all option in FortiGate session handling?

To modify existing sessions after a policy change (C) Signup and view all the answers

What is the most granular setting you can use in FortiGate session handling?

config firewall policy (D) Signup and view all the answers