nerdexam
FortinetFortinet

NSE4 · Question #300

NSE4 Question #300: Real Exam Question with Answer & Explanation

The correct answer is A: diagnose sys session filter clear. Correct FortiGate CLI syntax for session table diagnostics includes clearing active filters and displaying the currently configured filter settings.

Submitted by valeria.br· Apr 18, 2026Logging and Monitoring

Question

What are examples of correct syntax for the session table diagnostics command? (Choose two.)

Options

  • Adiagnose sys session filter clear
  • Bdiagnose sys session src 10.0.1.254
  • Cdiagnose sys session filter
  • Ddiagnose sys session filter list dst.

Explanation

Correct FortiGate CLI syntax for session table diagnostics includes clearing active filters and displaying the currently configured filter settings.

Common mistakes.

  • B. The syntax diagnose sys session src 10.0.1.254 is incorrect for setting a source IP filter; the correct syntax would be diagnose sys session filter set src 10.0.1.254.
  • D. The syntax diagnose sys session filter list dst. is incorrect. To list sessions with a filter applied, it would typically be diagnose sys session list, and dst. is not a valid parameter directly following filter list to set a filter.

Concept tested. FortiGate session filter CLI commands

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/fortios-cli-reference/853040/diagnose-sys-session-filter

Topics

#CLI commands#diagnostics#session table

Community Discussion

No community discussion yet for this question.

Full NSE4 PracticeBrowse All NSE4 Questions