Which two statements are true about the RPF check? (Choose two.)

The RPF check is specifically designed to be performed on the very first packet received for any new session. This initial check verifies that the source IP address of the incoming packet is legitimate by ensuring it arrived on an interface that could be used to route traffic back to that source.

The RPF check is performed on the first packet initiated from a source (the 'sent' packet) of a new session, not typically on the first reply packet, as the reply packet's source is expected to be the legitimate destination of the initial packet.

While the RPF check applies to the first 'sent' packet of a new session, it does not apply to the first 'reply' packet in the same manner as an originating RPF check against the source IP. The RPF check's focus is on validating the source of incoming traffic.

RPF (Reverse Path Forwarding) is a crucial security mechanism implemented on FortiGate devices. Its primary purpose is to protect the FortiGate and the network from IP spoofing attacks by validating the authenticity of a packet's source IP address based on routing information.