nerdexam
Fortinet

NSE4_FGT-7.0 · Question #52

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

The correct answer is B. Strict RPF checks the best route back to the source using the incoming interface. This question asks to identify the true statement regarding the behavior of a strict Reverse Path Forwarding (RPF) check on a FortiGate device.

Routing

Question

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

Options

  • AThe strict RPF check is run on the first sent and reply packet of any new session.
  • BStrict RPF checks the best route back to the source using the incoming interface.
  • CStrict RPF checks only for the existence of at cast one active route back to the source using the
  • DStrict RPF allows packets back to sources with all active routes.

How the community answered

(22 responses)
  • B
    86% (19)
  • C
    9% (2)
  • D
    5% (1)

Why each option

This question asks to identify the true statement regarding the behavior of a strict Reverse Path Forwarding (RPF) check on a FortiGate device.

AThe strict RPF check is run on the first sent and reply packet of any new session.

Strict RPF checks are performed on all incoming packets to validate source reachability, not exclusively on the initial sent and reply packets of a new session.

BStrict RPF checks the best route back to the source using the incoming interface.Correct

A strict RPF check verifies that the best route back to a packet's source IP address in the routing table exists and specifically uses the same interface through which the packet initially arrived, ensuring network path consistency.

CStrict RPF checks only for the existence of at cast one active route back to the source using the

Strict RPF requires that the *best* route back to the source uses the *incoming interface*, making it a more stringent check than merely confirming the existence of any active route.

DStrict RPF allows packets back to sources with all active routes.

Strict RPF allows packets only if the best route back to the source is via the incoming interface, not simply if all active routes exist or are suitable.

Concept tested: FortiGate Strict Reverse Path Forwarding (RPF)

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/316973/reverse-path-forwarding-rpf-checks

Topics

#RPF check#strict RPF#reverse path forwarding#security features

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4_FGT-7.0 Practice