StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 65 of 440 · hard

A newly reproduced software-processed SYN is absent from a correctly scoped FortiGate ingress capture; acceleration visibility has been accounted for. What should be checked next?

Choose the single best answer.

  1. A.The forwarding-policy action before establishing that the packet reaches FortiGate
  2. B.Source NAT selection before establishing that the packet reaches FortiGate
  3. C.Return-path routing before establishing that the initial packet reaches FortiGate
  4. D.The client's upstream path to the expected FortiGate interface
Show the answer and explanation

✓ Correct answer

  • The client's upstream path to the expected FortiGate interface

With capture scope and software visibility established, investigate the upstream path first. Forwarding policy, NAT and return routing are later stages and cannot explain the initial packet never reaching the observed ingress.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.