View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam


NSE 4 - FortiOS 7.6 Administrator Exam Materials-Question 6 Discussion

Refer to the exhibit. The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team? (Choose one answer)

  • A. Move NOC_Access to the top of the list to ensure all profile settings take effect.
  • B. Increase the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile.
  • C. Ensure that all NOC_Access users are assigned the super_admin role to guarantee access.
  • D. Increase the admintimeout value under config system accprofile NOC_Access.
Correct Answer: B

Brave-Dump Clients Votes

B 58.33%
D 41.67%

Comments



Zdenek 2025-10-21 13:57:28

Selected Answers: D


config system accprofile
edit "NOC_access"
set admintimeout-override enable
set admintimeout 50
next
end
  • Zdenek 2025-10-22 12:41:14
    FortiGate 7.6 Administrator Study Guide, page 21 says that "The Override Idle Timeout" option allows the "admintimeout" value to be overridden for each access profile. Therefore the correct answer should be D. B is incorrect because "offline value" does not exist.

Derrick Watson 2025-11-16 07:08:21

Selected Answers: D


Pg 22 of FGT 7.6 Administrator says. The Override Idle Timeout option allows the admintimeout value, under config system accprofile, to be overridden for each access profile.

Dizzle D 2025-12-14 07:20:41

Selected Answers: D


Explanation
- admintimeout is the parameter that controls how long an administrator’s GUI session can remain idle before being disconnected.
- By default, FortiGate sets this to 5 minutes. If the NOC team wants longer sessions without being logged out, the administrator must increase this value in the specific admin profile (NOC_Access).
- The other options are incorrect because:
- A. Move NOC_Access to the top of the list → Ordering of profiles does not affect timeout behavior.
- B. Increase Override Idle Timeout → This parameter applies to individual admin accounts, not profiles. The question specifies the admin profile.
- C. Assign super_admin role → This changes privileges, not session timeout.

✅ So the administrator should configure:
config system accprofile
edit NOC_Access
set admintimeout <desired value in minutes>
next
end

Anonymous User 2025-12-21 17:07:20

Selected Answers: B


It seems that both answers are correct: B via the GUI and D via the CLI.

Dallouf 2026-01-19 21:05:04

Selected Answers: B


because GUI mode

Anonymous User 2026-01-25 06:51:10

Selected Answers: D


D

marcin 2026-02-03 13:29:41

Selected Answers: B


“You can override the global administrator idle timeout on a per-profile basis by enabling Override Idle Timeout and setting a custom value.”
Override Idle Timeout
Never Timeout
Offline - 1-480 minutes

B - 200%

CABGroup 2026-02-10 22:31:30

Selected Answers: B


b

Chris 2026-03-06 08:09:04

Selected Answers: B


GUI

Rebecca Marriott 2026-03-17 13:49:01

Selected Answers: D


In FortiOS, you have two ways to manage GUI idle timeouts:
Global Timeout: By default, all admins follow the global timer set under config system global (usually 5 minutes).
Profile Override: To satisfy a specific request for one group (like the NOC team) without changing the timeout for every other administrator on the device, you use an Access Profile override.
By navigating to config system accprofile and editing the NOC_Access profile, you can use the set admintimeout command to define a longer duration specifically for users assigned to that profile.

B: While "Override Idle Timeout" is the name of the toggle in the GUI, the actual parameter being adjusted is the admintimeout. Furthermore, "offline value" is not standard FortiGate terminology for this setting.

Anonymous User 2026-03-22 05:34:21

Selected Answers: B


FortiGate allows you to control GUI session timeout globally using admintimeout, but that affects all administrators.

If you want to adjust the timeout specifically for a certain admin profile (like NOC_access), you must use the “Override idle timeout” setting within that admin profile.

So:

Option B correctly targets the requirement: extending session time only for the NOC team without affecting others.

onder 2026-03-24 22:37:29

Selected Answers: B


best one