exam questions

Exam FCP_FGT_AD-7.4 All Questions

View all questions & answers for the FCP_FGT_AD-7.4 exam

Exam FCP_FGT_AD-7.4 topic 1 question 73 discussion

Actual exam question from Fortinet's FCP_FGT_AD-7.4
Question #: 73
Topic #: 1
[All FCP_FGT_AD-7.4 Questions]

An administrator has configured a strict RPF check on FortiGate.

How does strict RPF check work?

  • A. Strict RPF checks the best route back to the source using the incoming interface.
  • B. Strict RPF allows packets back to sources with all active routes.
  • C. Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
  • D. Strict RPF check is run on the first sent and reply packet of any new session.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sxcap
2 weeks ago
Selected Answer: A
if the route is the best, traffic is allowed, if not, traffic is drop
upvoted 1 times
...
hecjoseroag
2 weeks, 5 days ago
Selected Answer: A
'strict' : a routing lookup (with best match) is made for the packet source IP. Packet is dropped if its ingressing interface does not match the interface selected by the routing lookup. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Reverse-Path-Forwarding-RPF-implementation-and-use/ta-p/194382
upvoted 1 times
...
Charly0710
1 month ago
Selected Answer: A
Página 86
upvoted 1 times
...
vuhidus
1 month, 1 week ago
Selected Answer: A
A correct one. I checked in an other comment B by error
upvoted 1 times
...
evdw
1 month, 1 week ago
Selected Answer: A
strict rfp checks the best route to the source
upvoted 1 times
...
JRKhan
1 month, 1 week ago
Selected Answer: A
strict rfp also checks the best route to the source
upvoted 1 times
...
vuhidus
1 month, 1 week ago
Selected Answer: B
B. Strict RPF allows packets back to sources with all active routes.
upvoted 1 times
vuhidus
1 month, 1 week ago
I choose B by error. Correct one is A
upvoted 1 times
...
...
s4mu3l007
2 months ago
A Strict: In this mode, Fortigate also verifies that the matching route is the best route in the routing table. That is, if the route in table contains a matching route for the source address and the incoming interface, but there is a better route for the source address through another interface the the rpf check fails.
upvoted 2 times
...
CharlieS8
2 months, 1 week ago
A correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago