NSE7 Troubleshooting and Diagnostics Practice Question
A FortiGate administrator is investigating a slow network issue. The 'diagnose sys session stat' shows a high number of sessions. Which THREE commands can help identify the source of the high session count?
⚠ Common exam trap
Candidates often think 'diagnose sys session stat' (Option D) provides source-level detail, but it only shows aggregate counters, not per-source or per-policy breakdowns, making it useless for identifying the specific source of high session counts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
diagnose sys session list | grep <policy_id>
'diagnose sys session list | grep <policy_id>' filters the session list to show only sessions matching a specific firewall policy ID. This allows the administrator to identify which policy is handling the most sessions, helping to pinpoint the source of high session counts by correlating traffic patterns with policy usage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
diagnose sys session list | grep <policy_id>
Why this is correct
Counts sessions per policy to see which policy is most used.
- ✓
diagnose sys session filter src <IP>
Why this is correct
Filters sessions by source IP to see if a specific host is generating many sessions.
- ✓
diagnose sys session top-talkers
Why this is correct
Displays top session generators by source IP.
- ✗
diagnose sys session stat
Why it's wrong here
This only shows the total count, not the source.
- ✗
diagnose netlink interface list
Why it's wrong here
Shows interface information, not session details.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.