NSE 4 – FortiGate 6.4 — Question 49

Which two statements are true about the RPF check? (Choose two.)

Answer options

• A. The RPF check is run on the first sent packet of any new session.
• B. The RPF check is run on the first reply packet of any new session.
• C. The RPF check is run on the first sent and reply packet of any new session.
• D. RPF is a mechanism that protects FortiGuard and your network from IP spoofing attacks.

Correct answer: A, D

Explanation

The correct answer is A and D because the RPF check indeed runs on the first sent packet of any new session, ensuring legitimate traffic flow, while also providing protection against IP spoofing attacks. Options B and C are incorrect because the RPF check does not run on the first reply packet, nor does it apply to both the sent and reply packets simultaneously.