Fortinet Exam NSE7_NST-7.2 Topic 4 Question 18 Discussion

Actual exam question for Fortinet's NSE7_NST-7.2 exam

Question #: 18
Topic #: 4

[All NSE7_NST-7.2 Questions]

Which of the following regarding protocol states is true?

Aproto_state=00 indicates that UDP traffic flows in both directions.

Bproto_state-01 indicates an established TCP session.

Cproto_state=10 indicates an established TCP session.

Dproto state=01 indicates one-way ICMP traffic.

Show Suggested Answer

Suggested Answer: C

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer:

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Fortinet Network Security 7.2 Support Engineer Documentation

Fortinet Firewall Protocol State Documentation

by Weldon at Dec 08, 2024, 10:41 AM

Limited Time Offer

25%

Off

Get Premium NSE7_NST-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Herminia

2 months ago

B) proto_state-01 seems like the most logical answer here. Who else is ready to ace this certification?

upvoted 0 times

...

Glennis

2 months ago

Haha, this question is making my head spin! I need to brush up on my protocol state knowledge before the exam.

upvoted 0 times

Mary

1 months ago

D) proto state=01 indicates one-way ICMP traffic.

upvoted 0 times

...

Alana

1 months ago

C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Pansy

2 months ago

B) proto_state-01 indicates an established TCP session.

upvoted 0 times

...

Barbra

2 months ago

A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Gertude

2 months ago

D) proto state=01 indicating one-way ICMP traffic sounds a bit odd to me. ICMP isn't really a session-oriented protocol, is it?

upvoted 0 times

...

Alaine

3 months ago

Wait, isn't it C) proto_state=10 that indicates an established TCP session? I'm pretty sure I learned that in my networking class.

upvoted 0 times

Regenia

2 months ago

Thanks for confirming. C) proto_state=10 is the correct option.

upvoted 0 times

...

Dallas

2 months ago

I remember that too. It's definitely C) proto_state=10.

upvoted 0 times

...

Roxanne

2 months ago

Yes, you are correct. C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Deeann

3 months ago

I think the answer is A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Refugia

3 months ago

But doesn't proto_state=10 indicate a half-open TCP session?

upvoted 0 times

...

Veta

3 months ago

I think the correct answer is B) proto_state-01 indicates an established TCP session.

upvoted 0 times

Fatima

2 months ago

Let's double check, I'm pretty sure it's A) proto_state=00 indicates that UDP traffic flows in both directions.

upvoted 0 times

...

Vonda

2 months ago

Are you sure? I believe it is D) proto state=01 indicates one-way ICMP traffic.

upvoted 0 times

...

Eladia

2 months ago

Actually, I think the correct answer is C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Alease

3 months ago

I agree, B) proto_state-01 indicates an established TCP session.

upvoted 0 times

...

Hui

3 months ago

I disagree, I believe the correct answer is C) proto_state=10 indicates an established TCP session.

upvoted 0 times

...

Refugia

3 months ago

I think the answer is B) proto_state=01 indicates an established TCP session.

upvoted 0 times

...