NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #18 Discussion

EFW 7.6 page 289

First the firtigate will check the RPF C is coorect

EFW 7.6 page 18 & Page 289.

From Study Guide:
# Life of a Packet—Initial Session Packets
Network Interface -> mandatory
---
Access Control List (ACL) -> optional/configurable
Host Protection Engine (HPE) -> optional/configurable
IP integrity header checking -> mandatory -------------------------> D is right
IPsec VPN decryption -> optional/configurable --------------------> B is wrong
---
Quarantine -> optional/configurable
FortiTelemetry -> optional/configurable
User authentication (captive portal) -> optional/configurable
---
Kernel -> mandatory
1. Destination NAT
2. Routing, RPF check, and SD-WAN --------------------------------> C is wrong
3. Stateful inspection/policy lookup/session management
4. Session helpers
5. User authentication
6. Device identification
7. SSL VPN
8. Local management traffic
---
UTM/NGFW -> optional/configurable
1. Flow-based inspection
2. Proxy-based inspection
3. Explicit web proxy
4. Botnet check
---
Kernel -> mandatory
1. Forwarding
2. Source NAT
---
IPsec VPN encryption -> optional/configurable
---
Traffic shaping -> optional/configurable
---
WAN optimization -> optional/configurable
---
Network interface -> mandatory

-----------------------------------------------------------------------------------

From Study Guide:
The FortiGate CPU always processes the first part of traffic:
-> TCP traffic: the first three-way handshake
-> UDP traffic: the first packet
So A is wrong

Page 289

D

Enterprise_Firewall_7.6_Administrator_Study_Guide Page 18