NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate administrator sees the following output:
"diagnose sys session filter dport 443 diagnose sys session list session info: proto=6 proto_state=01 duration=3600 expire=3599"
What does this session duration and expire time indicate?
⚠ Common exam trap
The trap here is that candidates often misinterpret 'duration' and 'expire' as independent values rather than recognizing that their sum equals the total session timeout, leading them to incorrectly assume the session is about to expire or is newly established.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The session has a timeout of 7200 seconds (2 hours)
The session duration of 3600 seconds and expire time of 3599 seconds indicate that the session has been active for 3600 seconds and has 3599 seconds remaining before timeout. Since the total timeout is the sum of duration and expire time (3600 + 3599 = 7199, approximately 7200 seconds), this matches the default TCP session timeout of 7200 seconds (2 hours) on FortiGate. The 'proto_state=01' confirms a TCP session in established state, and the output shows the session is still valid with a long remaining lifetime.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The session has a timeout of 7200 seconds (2 hours)
Why this is correct
Duration + expire = total timeout, 3600+3599=7199~7200.
- ✗
The session is about to be torn down
Why it's wrong here
Expire 3599 seconds is still a long time.
- ✗
The session is newly established
Why it's wrong here
Duration of 3600 indicates it has been active for 1 hour.
- ✗
The session is using UDP protocol
Why it's wrong here
proto=6 indicates TCP.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.