Fortinet Certified Solution Specialist: Enterprise Firewall & Secure Networking 7.6 Architect Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  for TCP (proto=6), State 01 mean 3 ways handshake completed. So answer should be D

• Chose D3

  D, the session is in proto_state=01, which indicates a established session. Also the state = may_dirty synced which means its allowed by a policy (also see policy=1)

• Chose C1

  Probably C because proto_state is 01 and unestablished tcp sessions are not synced