StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 68 of 440 · hard

A SYN/ACK reaches WAN, but the expected LAN response does not leave. Which checks are best aligned with the observation?

Choose the single best answer.

  1. A.Session/reverse-NAT state and the return packet's route/processing
  2. B.Only the initial hostname-resolution step, despite the reply already arriving
  3. C.Only the original SYN ingress, despite the completed outbound and return WAN observations
  4. D.Only replace the server certificate before completing the TCP handshake
Show the answer and explanation

✓ Correct answer

  • Session/reverse-NAT state and the return packet's route/processing

The response reached WAN, so inspect return processing, session state and reverse translation toward LAN. Earlier lookup/ingress steps and certificate replacement do not directly explain this missing return egress.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.