Courseiva
Troubleshooting and DiagnosticseasyMultiple ChoiceObjective-mapped

NSE7 Troubleshooting and Diagnostics Practice Question

An administrator wants to see the current sessions for a specific source IP address 192.168.1.10. Which CLI command should be used?

⚠ Common exam trap

It's easy for candidates to confuse the `diagnose` command category (used for diagnostics and session inspection) with `get` or `execute` commands, or mistakenly think `diagnose debug flow` is appropriate for listing sessions when it is actually a real-time debug tool that can disrupt production traffic.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

diagnose sys session filter src 192.168.1.10; diagnose sys session list

The `diagnose sys session filter src` command sets a filter for the source IP address, and `diagnose sys session list` then displays only the sessions matching that filter. This two-step process is the standard FortiGate CLI method for viewing active sessions for a specific source IP, as it leverages the session table directly without triggering debug overhead.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • diagnose sys session filter src 192.168.1.10; diagnose sys session list

    Why this is correct

    This is the correct way to filter and list sessions for a source IP.

  • get system session list src 192.168.1.10

    Why it's wrong here

    This command does not exist; 'get system session' is not valid.

  • diagnose debug flow src-addr 192.168.1.10

    Why it's wrong here

    This debugs flow, not lists sessions.

  • execute session list source 192.168.1.10

    Why it's wrong here

    This command does not exist.

About these practice questions

This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.