FCSS-EFW-AD-7-6: Fortinet NSE 7 - Enterprise Firewall 7.6 AdministratorDemo

By Fortinet · Question Mode

QuestionQ24

Security profiles

While inspecting an enterprise network, you identify a suspicious packet with MAC address 00:09:0f:09:18:81.

Which two statements about this suspicious packet are correct?

Choose two
  • A The suspicious packet is related to a cluster with a group-id value lower than 255.
  • B The suspicious packet corresponds to a port with a physical index equal to 2.
  • C The suspicious packet is related to a cluster that has VDOMs enabled
  • D The suspicious packet is related to a cluster configured with the FortiGate Session Life Protocol (FGSP).
Explanation

00:09:0f:09 is the FGCP virtual-MAC prefix for a group ID below 256. The fifth octet, 18 hexadecimal, is group ID 24. In the applicable VMAC encoding, the final octet 81 represents virtual-cluster ID 1 and physical index 1; virtual-cluster ID 1 denotes the second virtual cluster and therefore indicates VDOM-enabled virtual clustering. FGSP is a separate peer session-synchronization mechanism and is not identified by this FGCP VMAC format.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!