NSE7 Advanced VPN and Zero Trust Practice Question
An administrator is troubleshooting a ZTNA connection issue where a user can access the ZTNA gateway but the connection to the internal application fails after a few seconds. The FortiGate logs show 'ZTNA session timeout' but the timeout value is set to 30 minutes. What could be the reason?
⚠ Common exam trap
Many exam-takers assume 'ZTNA session timeout' refers to the global timeout value, overlooking that the ZTNA proxy has its own independent idle timeout that defaults to a much shorter interval.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ZTNA proxy idle timeout is set to a lower value than the global timeout.
The ZTNA proxy has its own idle timeout setting that operates independently of the global timeout. Even though the global timeout is set to 30 minutes, if the per-proxy idle timeout is configured to a lower value (e.g., 30 seconds), the proxy will terminate the session after that idle period, logging 'ZTNA session timeout'. This explains why the connection fails after a few seconds despite the long global timeout.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The internal application is not responding to the proxy request.
Why it's wrong here
The log indicates timeout, not application unavailability.
- ✓
The ZTNA proxy idle timeout is set to a lower value than the global timeout.
Why this is correct
The proxy idle timeout can be configured separately and may be shorter.
- ✗
The internal application has a 5-second timeout.
Why it's wrong here
The log refers to ZTNA session timeout, not application timeout.
- ✗
The client's FortiClient is not receiving the ZTNA tags.
Why it's wrong here
The client can access the gateway, so tags are likely received.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.