FCSS_EFW_AD-7-4 practice question 8 of 15

What is the initial step performed by FortiGate when handling the first packets of a session?

Full set: 57 questions

Answer options

A: Installation of the session key in the network processor (NP)

B: Data encryption and decryption

C: Security inspections such as ACL, HPE, and IP integrity header checking Correct answer

D: Offloading the packets directly to the content processor (CP)

Correct Answer:

C. Security inspections such as ACL, HPE, and IP integrity header checking

Explanation

When FortiGate processes the first packets of a session, it follows a sequence of steps to determine how the traffic should be handled before establishing a session. The initial step involves:
● Access Control List (ACL) checks: Determines if the traffic should be allowed or blocked based on predefined security rules.
● Hardware Packet Engine (HPE) inspections: Ensures that packet headers are valid and comply with protocol standards.
● IP Integrity Header Checking: Verifies if the IP headers are intact and not malformed or spoofed. Once these security inspections are completed and the session is validated, FortiGate then installs the session in hardware (if offloading is enabled) or processes it in software.

Keep practicing

Take the free FCSS_EFW_AD-7-4 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test