nerdexam
Fortinet

NSE4_FGT-7.0 · Question #158

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

The correct answer is B. execute ping C. execute traceroute D. diagnose sniffer packet any. To troubleshoot Layer 3 network issues when physical and link layers are not at fault, essential CLI commands include execute ping, execute traceroute, and diagnose sniffer packet any.

Troubleshooting and Monitoring

Question

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

Options

  • Adiagnose sys top
  • Bexecute ping
  • Cexecute traceroute
  • Ddiagnose sniffer packet any
  • Eget system arp

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    95% (35)
  • E
    3% (1)

Why each option

To troubleshoot Layer 3 network issues when physical and link layers are not at fault, essential CLI commands include `execute ping`, `execute traceroute`, and `diagnose sniffer packet any`.

Adiagnose sys top

`diagnose sys top` displays system resource usage (CPU, memory, processes) and is primarily for troubleshooting performance issues or high resource consumption, not direct Layer 3 connectivity problems.

Bexecute pingCorrect

The `execute ping` command is used to test basic IP connectivity and reachability between devices at Layer 3 by sending ICMP echo requests and measuring response times.

Cexecute tracerouteCorrect

The `execute traceroute` command helps identify the full network path a packet takes to a destination, revealing Layer 3 routing issues, hops, and potential points of failure or latency along the route.

Ddiagnose sniffer packet anyCorrect

The `diagnose sniffer packet` command captures and displays real-time network traffic, allowing for detailed inspection of Layer 3 headers (IP addresses, protocols) and payload to diagnose routing, ACL, or other IP-level communication problems.

Eget system arp

`get system arp` displays the Address Resolution Protocol (ARP) table, which maps IP addresses to MAC addresses; ARP operates at Layer 2 (Data Link Layer), and the question specifically excludes Layer 2 issues.

Concept tested: FortiGate Layer 3 network troubleshooting commands

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/522197/troubleshooting-commands

Topics

#CLI commands#Layer 3 troubleshooting#ping#traceroute#packet sniffer

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice