NSE7-NST-7-2: Fortinet NSE 7 - Network Security 7.2 Support EngineerDemo

Question

Refer to the exhibit, which displays the output of a diagnose command.

Question Image

Which two conclusions can be drawn from the output displayed in the exhibit?

Choose two

A This is an expected session created by the IPS engine.
B Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.0.1.10.
C Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.200.1.1.
D This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.

Explanation

An expectation session is a pinhole session, typically created by a FortiGate session helper to permit related connections required by a protocol. The original-direction gateway is the first value in gwy=10.0.1.10/10.200.1.254, so traffic originating from 10.171.121.38 is routed to next-hop IP address 10.0.1.10.

Learn more

NSE7-NST-7-2: Fortinet NSE 7 - Network Security 7.2 Support EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ22

Community Discussion