Exam nse7_efw-72 All QuestionsBrowse all questions from this exam
Question 34

Which statement about network processor (NP) offloading is true?

    Correct Answer: A

    The network processor (NP) checks the session key or IPSec Security Association (SA). This is a fundamental function of NP offloading as it ensures secure and efficient handling of network traffic. Other options provided either do not describe typical responsibilities of network processors or contain incorrect assertions about the process. For instance, while the FortiGate CPU does interact with TCP traffic during the initial handshake, it does not offload the first packets of SYN/ACK and ACK of the three-way handshake directly to the NP without processing.

Discussion
33k_Option: A

Only A is correct, D is wrong because for TCP traffic, the first packets of the three-way handshake must first go to the FortiGate CPU.

mollyk70Option: A

A correct, P44 study guide 7.2

havokduOption: A

A is correct, according to Study guide page 44. D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP like the question implies. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.

charrucoOption: A

A is correct study guide 7.2, page 44

truserudOption: A

Both A & D are correct though, as stated on page 44 for NP check of SA and session, and on page 46 for TCP NP Session Flow. Here the following is stated: If the FortiGate CPU determines that the conditions are met for the first part of the traffic, then the CPU accelerates and offloads the rest of the traffic to the NP6 processor.

havokdu

D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.

5deee77Option: A

study guide 7.2, page 44

mollyk70

D is also correct....

havokdu

D is not correct. Fortigate CPU doesn't offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.