NSE7-NST-7-2: Fortinet NSE 7 - Network Security 7.2 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ17

Network Security Support Engineer

Which statement about protocol states is true?

  • A proto_state=00 indicates that UDP traffic flows in both directions.
  • B proto_state=01 indicates an established TCP session.
  • C proto_state=10 indicates an established TCP session.
  • D proto_state=01 indicates one-way ICMP traffic.
Explanation

For FortiGate TCP sessions, proto_state records the protocol state by direction, and the value 1 denotes ESTABLISHED. Fortinet documents proto_state=01 as an established TCP session. ICMP always has proto_state=00, while UDP uses 01 when a reply has been seen.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!