Fortinet Exam NSE7_NST-7.2 Topic 2 Question 14 Discussion

Actual exam question for Fortinet's NSE7_NST-7.2 exam

Question #: 14
Topic #: 2

[All NSE7_NST-7.2 Questions]

Which of the following regarding protocol states is true?

Aproto_state=00 indicates that UDP traffic flows in both directions.

Bproto_state-01 indicates an established TCP session.

Cproto_state=10 indicates an established TCP session.

Dproto state=01 indicates one-way ICMP traffic.

Show Suggested Answer

Suggested Answer: C

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer:

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Fortinet Network Security 7.2 Support Engineer Documentation

Fortinet Firewall Protocol State Documentation

by Lucina at Sep 12, 2024, 07:46 PM

Limited Time Offer

25%

Off

Get Premium NSE7_NST-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ivan

16 days ago

Wait, is UDP traffic supposed to flow in both directions when proto_state=00? That doesn't sound right to me.

upvoted 0 times

...

Cordell

18 days ago

Wow, these protocol state options are getting pretty complex. I'm just going to guess and hope for the best.

upvoted 0 times

...

Princess

20 days ago

Haha, proto_state=01 for one-way ICMP traffic? That's a good one! Definitely not the right answer.

upvoted 0 times

...

Audria

22 days ago

I agree with Kirk on that one. Option C is the correct answer.

upvoted 0 times

Carissa

9 days ago

I think option A is correct.

upvoted 0 times

...

Evette

1 months ago

Hmm, that makes sense too. I'll reconsider my answer.

upvoted 0 times

...

1 months ago

I think option B is the correct answer. An established TCP session would have a proto_state of 01.

upvoted 0 times

Tracie

11 days ago

I'm not sure, but I think option A is correct. proto_state=00 indicates UDP traffic flows in both directions.

upvoted 0 times

...

Hyun

14 days ago

I think it's actually option C. proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Janae

24 days ago

I agree, option B is correct. An established TCP session has a proto_state of 01.

upvoted 0 times

...

Royce

2 months ago

I disagree, I believe the correct answer is C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Evette

2 months ago

I think the answer is B) proto_state=01 indicates an established TCP session.

upvoted 0 times

...