NSE 4 – FortiGate 6.4 — Question 23

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

Answer options

• A. diagnose sys top
• B. execute ping
• C. execute traceroute
• D. diagnose sniffer packet any
• E. get system arp

Correct answer: B, C, D

Explanation

The correct answers, B, C, and D, are focused on Layer 3 troubleshooting; 'execute ping' checks connectivity, 'execute traceroute' identifies the path taken by packets, and 'diagnose sniffer packet any' captures packets for analysis. Options A and E are not primarily used for Layer 3 issues; 'diagnose sys top' is for system performance monitoring, and 'get system arp' deals with ARP table details, which are not directly related to diagnosing Layer 3 problems.