FCSS_NST_SE-7.6 · Question #87
Refer to the exhibit, which shows the partial output of diagnose sys session stat. An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed. Which…
The correct answer is B. The FortiGate is deleting sessions because the kernel cannot allocate more memory pages. D. The FortiGate is not accepting sessions because the device has been down 16 out of 120. The FortiGate is deleting sessions because the kernel cannot allocate more memory pages. The memory_tension_drop=4 counter shows that, under memory pressure, the oldest sessions are being removed when the system can't allocate new session blocks The FortiGate is not accepting…
Question
Refer to the exhibit, which shows the partial output of diagnose sys session stat. An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed. Which two reasons could explain this? (Choose two.)
Exhibit
Options
- AThe FortiGate is dropping all TCP sessions with incomplete three-way handshakes.
- BThe FortiGate is deleting sessions because the kernel cannot allocate more memory pages.
- CThe FortiGate is flushing sessions because of high memory usage.
- DThe FortiGate is not accepting sessions because the device has been down 16 out of 120
How the community answered
(33 responses)- A21% (7)
- B70% (23)
- C9% (3)
Explanation
The FortiGate is deleting sessions because the kernel cannot allocate more memory pages. The memory_tension_drop=4 counter shows that, under memory pressure, the oldest sessions are being removed when the system can't allocate new session blocks The FortiGate is not accepting sessions because the device has been down 16 out of 120 The dev_down=16/120 counter indicates 16 sessions were deleted due to an interface going down within the last 120 seconds
Topics
Community Discussion
No community discussion yet for this question.