NSE7 Troubleshooting and Diagnostics Practice Question
An administrator wants to see the current sessions for a specific source IP address 192.168.1.10. Which CLI command should be used?
⚠ Common exam trap
It's easy for candidates to confuse the `diagnose` command category (used for diagnostics and session inspection) with `get` or `execute` commands, or mistakenly think `diagnose debug flow` is appropriate for listing sessions when it is actually a real-time debug tool that can disrupt production traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
diagnose sys session filter src 192.168.1.10; diagnose sys session list
The `diagnose sys session filter src` command sets a filter for the source IP address, and `diagnose sys session list` then displays only the sessions matching that filter. This two-step process is the standard FortiGate CLI method for viewing active sessions for a specific source IP, as it leverages the session table directly without triggering debug overhead.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
diagnose sys session filter src 192.168.1.10; diagnose sys session list
Why this is correct
This is the correct way to filter and list sessions for a source IP.
- ✗
get system session list src 192.168.1.10
Why it's wrong here
This command does not exist; 'get system session' is not valid.
- ✗
diagnose debug flow src-addr 192.168.1.10
Why it's wrong here
This debugs flow, not lists sessions.
- ✗
execute session list source 192.168.1.10
Why it's wrong here
This command does not exist.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.