Which of the following regarding protocol states is true?

Which of the following regarding protocol states is true?
A . proto_state=00 indicates that UDP traffic flows in both directions.
B . proto_state-01 indicates an established TCP session.
C . proto_state=10 indicates an established TCP session.
D . proto state=01 indicates one-way ICMP traffic.

Answer: C

Explanation:

Understanding protocol states:

proto_state=00: Indicates no traffic or a closed session.

proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.

proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.

proto_state=11: Often indicates a fully established and active bidirectional session.

Explanation of correct answer

proto_state=10 is the correct indication for an established TCP session as it signifies that the session is fully established and active.

Reference: Fortinet Network Security 7.2 Support Engineer Documentation Fortinet Firewall Protocol State Documentation