StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 67 of 440 · medium

The capture shows a translated SYN leaving WAN repeatedly and no SYN/ACK returning. What is the most appropriate next investigation?

Choose the single best answer.

  1. A.The initial client-to-FortiGate ingress path, assumed absent despite the observed ingress SYN
  2. B.Destination reachability and the downstream/return route
  3. C.An initial policy deny, assumed solely from the absent server response
  4. D.The DNS resolution stage, assumed failed despite the established destination-IP SYN
Show the answer and explanation

✓ Correct answer

  • Destination reachability and the downstream/return route

Egress SYNs without replies direct investigation downstream or to return routing. They do not prove a destination failure versus filtering, but the observed packet already passed initial ingress/forwarding and has a destination IP.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.