NSE 4 – FortiGate 7.0 — Question 56

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

Answer options

• A. execute ping
• B. diagnose sys top
• C. get system arp
• D. execute traceroute
• E. diagnose sniffer packet any

Correct answer: A, D, E

Explanation

The commands 'execute ping', 'execute traceroute', and 'diagnose sniffer packet any' are useful for identifying Layer 3 issues by testing connectivity and monitoring traffic. In contrast, 'diagnose sys top' provides system resource information and 'get system arp' displays the ARP table, which are not directly related to troubleshooting Layer 3 connectivity.