Fortinet Exam NSE7_NST-7.2 Topic 2 Question 10 Discussion

Actual exam question for Fortinet's NSE7_NST-7.2 exam

Question #: 10
Topic #: 2

[All NSE7_NST-7.2 Questions]

Which of the following regarding protocol states is true?

Aproto_state=00 indicates that UDP traffic flows in both directions.

Bproto_state-01 indicates an established TCP session.

Cproto_state=10 indicates an established TCP session.

Dproto state=01 indicates one-way ICMP traffic.

Show Suggested Answer

Suggested Answer: C

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer:

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Fortinet Network Security 7.2 Support Engineer Documentation

Fortinet Firewall Protocol State Documentation

by Tommy at Jul 15, 2024, 08:51 AM

Limited Time Offer

25%

Off

Get Premium NSE7_NST-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veronika

3 months ago

Seriously, who comes up with these convoluted protocol state names? I'm going with B) just to put this question out of its misery.

upvoted 0 times

...

Pamella

3 months ago

Haha, I bet the developers were just rolling a dice to come up with these proto_state values. Doesn't matter which one you pick, it's all a guess!

upvoted 0 times

Refugia

2 months ago

B) proto_state-01 indicates an established TCP session.

upvoted 0 times

...

Leota

2 months ago

A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Marquetta

3 months ago

Wait, is it B) or C)? I can never remember which one is the right one for an established TCP session.

upvoted 0 times

...

Roslyn

3 months ago

Hmm, I think D) proto state=01 indicates one-way ICMP traffic is the right answer. It just sounds more logical.

upvoted 0 times

Karina

3 months ago

I agree with you, D) proto state=01 indicates one-way ICMP traffic.

upvoted 0 times

...

Marci

3 months ago

I believe B) proto_state-01 indicates an established TCP session.

upvoted 0 times

...

Adelle

3 months ago

I think A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Cordelia

3 months ago

I'm leaning towards C) proto_state=10 indicates an established TCP session. That just makes more sense to me.

upvoted 0 times

...

Melvin

3 months ago

I'm pretty sure B) is the correct answer. proto_state=01 indicates an established TCP session.

upvoted 0 times

Kristofer

2 months ago

Thanks for clarifying, proto_state=01 is the one we should go with.

upvoted 0 times

...

Joseph

2 months ago

I agree, proto_state=01 is the correct option for an established TCP session.

upvoted 0 times

...

Mozell

2 months ago

That makes sense, proto_state=01 is definitely for TCP sessions.

upvoted 0 times

...

Laura

3 months ago

I think you're right, B) proto_state=01 does indicate an established TCP session.

upvoted 0 times

...

Chandra

4 months ago

I think D) proto state=01 indicates one-way ICMP traffic makes more sense based on my understanding of protocols.

upvoted 0 times

...

Barbra

4 months ago

Hmm, I see your point. But I still think B is the right answer because of the way TCP sessions are usually established.

upvoted 0 times

...

Marti

4 months ago

I disagree, I believe the correct answer is C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Barbra

4 months ago

I think the answer is B) proto_state=01 indicates an established TCP session.

upvoted 0 times

...