Fortinet
NSE8_812 · Question #154
You are investigating a problem related to FTP active mode. You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file. The FortiGate…
The correct answer is A. diagnose system session filter src 10.100.60.5 diagnose system session filter dst 172.16.133.50 diagnose system session filter dport 21 diagnose system session list C. diagnose system session filter src 172.16.133.50 diagnose system session filter dst 172.16.133.1 diagnose system session filter sport 20 diagnose system session list. See the full explanation below for the reasoning.
Question
You are investigating a problem related to FTP active mode. You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file. The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1. Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
Options
- Adiagnose system session filter src 10.100.60.5 diagnose system session filter dst 172.16.133.50 diagnose system session filter dport 21 diagnose system session list
- Bdiagnose system session filter src 172.16.133.50 diagnose system session filter dst 10.100.60.5 diagnose system session filter sport 20 diagnose system session list
- Cdiagnose system session filter src 172.16.133.50 diagnose system session filter dst 172.16.133.1 diagnose system session filter sport 20 diagnose system session list
- Ddiagnose system session filter src 10.100.60.5 diagnose system session filter dst 172.16.133.50 diagnose system session filter sport 20 diagnose system session list
How the community answered
(29 responses)- A76% (22)
- B17% (5)
- D7% (2)
Community Discussion
No community discussion yet for this question.