ExamGecko
Question list
Search
Search

Question 34 - NSE7_NST-7.2 discussion

Report
Export

Exhibit.

Refer to the exhibit, which shows the omitted output of diagnose npu np6 port-list on a FortiGate1500D.

An administrator is unable to analyze traffic flowing between port1 and port7 using the diagnose sniffer command.

Which two commands allow the administrator to view the traffic? (Choose two.)

A)

B)

C)

D)

A.
Option A
Answers
A.
Option A
B.
Option B
Answers
B.
Option B
C.
Option C
Answers
C.
Option C
D.
Option D
Answers
D.
Option D
Suggested answer: A, C

Explanation:

Diagnose NPU NP6 Port-list Disable Command:

The diagnose npu np6 port-list disable command disables specific ports on the NP6 processor. This can help in cases where you need to analyze traffic and the hardware offloading is interfering.

Command: diagnose npu np6 port-list disable 5 17 (as shown in Option A).

Diagnose NPU NP6 Fastpath Disable Command:

Disabling the fastpath feature on NP6 can also allow for better visibility into the traffic as it bypasses hardware acceleration, which might obscure traffic details.

Command: diagnose npu np6 fastpath disable 0 (as shown in Option C).

Fortinet Documentation on Troubleshooting BGP and NPU Settings (Fortinet Docs).

Fortinet Community Technical Notes on NPU and Traffic Analysis (Welcome to the Fortinet Community!).

asked 18/09/2024
JP Pelovello
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first