NSE 4 – FortiGate 7.0 — Question 46

Which two statements are true about the RPF check? (Choose two.)

Answer options

• A. The RPF check is run on the first sent packet of any new session.
• B. The RPF check is run on the first reply packet of any new session.
• C. The RPF check is run on the first sent and reply packet of any new session.
• D. RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.

Correct answer: A, D

Explanation

The correct answer is A and D because the RPF check indeed occurs on the first packet sent in a new session and is designed to protect against IP spoofing. Options B and C are incorrect as they misrepresent the timing of the RPF check, which does not involve the reply packets for establishing the session.