FCP_FGT_AD-7.6 · Question #103
Which two statements describe how the RPF check is used? (Choose two.)
The correct answer is A. The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks. C. The RPF check is run on the first sent packet of any new session. The RPF (Reverse Path Forwarding) check is used to prevent IP spoofing attacks by verifying that the source IP address of a received packet is reachable through the same interface it arrived on. If not, the packet is dropped, ensuring traffic legitimacy. The RPF check runs on…
Question
Which two statements describe how the RPF check is used? (Choose two.)
Options
- AThe RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.
- BThe RPF check is run on the first reply packet of any new session.
- CThe RPF check is run on the first sent packet of any new session.
- DThe RPF check is run on the first sent and reply packet of any new session.
How the community answered
(24 responses)- A88% (21)
- B8% (2)
- D4% (1)
Explanation
The RPF (Reverse Path Forwarding) check is used to prevent IP spoofing attacks by verifying that the source IP address of a received packet is reachable through the same interface it arrived on. If not, the packet is dropped, ensuring traffic legitimacy. The RPF check runs on the first sent packet of any new session to validate that the route to the source IP is consistent with the interface it’s received on. This helps FortiGate detect spoofed or asymmetric routing scenarios early in the session establishment.
Topics
Community Discussion
No community discussion yet for this question.