StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 64 of 440 · medium

Interpret this lab command: diagnose sniffer packet any 'host 192.0.2.20 and tcp port 443' 4 20 a Which interpretation is correct?

Choose the single best answer.

  1. A.Capture matching packets on any interface at verbosity 4, stop after 20, and use absolute UTC timestamps
  2. B.Capture four packets at verbosity 20 and use interface a
  3. C.Capture all traffic without a host filter until manually stopped
  4. D.Send twenty TCP probes to the server rather than capture packets
Show the answer and explanation

✓ Correct answer

  • Capture matching packets on any interface at verbosity 4, stop after 20, and use absolute UTC timestamps

The arguments are interface/filter, verbosity, packet count and timestamp format. The command is a filtered finite capture, not a probe generator or a reversed-argument specification.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.