Fortinet
NSE7_SOC_AR-7.6 · Question #46
Refer to the exhibits. Assume that the traffic flows are identical, except for the destination IP address. There is only one FortiGate in network address translation (NAT) mode in this environment…
The correct answer is A. The client 10.200.3.219 is conducting active reconnaissance. C. The destination hosts are not responding. You've hit your limit · resets 5am (America/New_York)
FortiSIEM Deployment and Configuration
Question
Refer to the exhibits. Assume that the traffic flows are identical, except for the destination IP address. There is only one FortiGate in network address translation (NAT) mode in this environment. Based on the exhibits, which two conclusions can you make about this FortiSIEM incident? (Choose two answers)
Options
- AThe client 10.200.3.219 is conducting active reconnaissance.
- BFortiGate is not routing the packets to the destination hosts.
- CThe destination hosts are not responding.
- DFortiGate is blocking the return flows.
How the community answered
(33 responses)- A70% (23)
- B9% (3)
- D21% (7)
Explanation
You've hit your limit · resets 5am (America/New_York)
Topics
#FortiSIEM incident analysis#network reconnaissance#NAT mode#traffic flow analysis
Community Discussion
No community discussion yet for this question.