View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


Question 116 Discussion

Refer to the exhibit. Partial output of diagnose sys session stat command is shown. An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed. Which two reasons could explain this? (Choose two answers)

  • A. FortiGate is not accepting sessions because the device has been down 16 out of 120 seconds.
  • B. FortiGate is dropping all TCP sessions with incomplete three-way handshakes.
  • C. FortiGate is flushing sessions because of high memory usage.
  • D. FortiGate is deleting sessions because the kernel cannot allocate more memory pages.
Correct Answer: C,D

Brave-Dump Clients Votes

CD 66.67%
BC 33.33%

Comments



Hasan Ahmed 2025-12-11 08:55:21

Selected Answers: C, D


C and D are the correct answer

Fatma Salih 2026-01-23 20:24:17

Selected Answers: B, C


B is correct because the device has reached the amount of allowed ephemeral sessions so it will start dropping any sessions with incompete handshake

James 2026-01-26 04:42:23

Selected Answers: C, D


* memory_tension_drop=4
Sessions dropped due to memory tension. This happens before extreme low memory. FortiGate proactively removes sessions.

flush=787
Sessions are being actively flushed. This is not normal cleanup — it’s defensive behavior