nerdexam
Fortinet

NSE4 · Question #221

Shown below is a section of output from the debug command diag ip arp list. index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e state=00000004 use=4589 confirm=4589 update=2422 ref=1 In the output…

The correct answer is C. It is the IP address of another network device located in the same LAN segment as the FortiGate. The diag ip arp list command output displays the FortiGate's ARP table, which contains mappings of IP addresses to MAC addresses for other devices on the same local network segment.

Submitted by valeria.br· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Shown below is a section of output from the debug command diag ip arp list. index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e state=00000004 use=4589 confirm=4589 update=2422 ref=1 In the output provided, which of the following best describes the IP address 172.20.187.150?

Options

  • AIt is the primary IP address of the port1 interface.
  • BIt is one of the secondary IP addresses of the port1 interface.
  • CIt is the IP address of another network device located in the same LAN segment as the FortiGate

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    93% (25)

Why each option

The `diag ip arp list` command output displays the FortiGate's ARP table, which contains mappings of IP addresses to MAC addresses for other devices on the same local network segment.

AIt is the primary IP address of the port1 interface.

The ARP table lists MAC-to-IP mappings of *other* devices on the local network, not the FortiGate's own primary IP address for the interface.

BIt is one of the secondary IP addresses of the port1 interface.

Similarly, the ARP table does not show the FortiGate's own secondary IP addresses; it shows addresses of remote devices learned through ARP.

CIt is the IP address of another network device located in the same LAN segment as the FortiGateCorrect

The `diag ip arp list` command displays the Address Resolution Protocol (ARP) table, which maps IP addresses to MAC addresses of other devices connected to the FortiGate's interfaces. Therefore, 172.20.187.150 is the IP address of another network device communicating on the LAN segment of port1, not the FortiGate's own IP address for that interface.

Concept tested: Understanding ARP table output

Topics

#ARP#Network Diagnostics#FortiGate CLI#Layer 2 Networking

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice