FCSS-NST-SE-7-6: Fortinet NSE 6 - Network Security 7.6 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ25

System troubleshooting

Refer to the exhibit. The partial output from the diagnose sys session stat command is displayed.

Question Image

Which statement about the output displayed in the exhibit is correct?

  • A 27 sessions have expired but are still in the session table in case any out-of-order packets arrive.
  • B 562 TCP sessions have their proto_state set to 01 if there is no inspection.
  • C There have been 131072 recorded ephemeral sessions but there are no current ones.
  • D 113 sessions have been dropped because of memory page exhaustion.
Explanation

For an uninspected TCP session, FortiGate represents the protocol state with 0 for the inspection-side digit and 1 for the client-side ESTABLISHED state, producing proto_state=01. Therefore, the 562 sessions reported as ESTABLISHED have that state when no inspection is applied. The ephemeral=0/131072 field indicates zero current ephemeral sessions out of a supported maximum of 131072, and memory_tension_drop=0 indicates no memory-tension drops.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!