View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


Question 66 Discussion

Refer to the exhibit. FortiGate is showing continuous high CPU usage. During a maintenance window, the CLI command diagnose sys top displays the output shown in the exhibit. The CLI command diagnose test application ipsmonitor 5 was run, but the CPU usage by daemon ipsengine did not drop. Which immediate action can you take to reduce the CPU usage effectively? (Choose one answer)

  • A. Bypass all IPS engines.
  • B. Reduce the number of IPS signatures enabled on the active IPS profiles.
  • C. Execute diagnose test application ipsmonitor 2 instead.
  • D. Disable IPS on all firewall policies.
Correct Answer: A

Brave-Dump Clients Votes

A 50%
C 50%

Comments



Brave-Dumps Admin 2025-11-07 15:08:50

Selected Answers: A


Study Guide page 275

TungTungSahur 2025-11-25 21:57:27

Selected Answers: C


It is mentioned in the question that "diagnose test application ipsmonitor 5" was run
So you are effectively bypassing already, "diagnose test application ipsmonitor 2" Toggle IPS engine enable/disable status - so you'd probably want to do that if you are already bypassing it and it keep eating all the CPU
  • Brave-Dumps Admin 2025-11-25 22:37:59
    Hello, please comment with a reference from study Guide: https://drive.google.com/file/d/1C1zNxeq_A1gE3IKqHWzUFj1ZRp-DkpAJ/view?usp=sharing
  • Adam 2026-01-15 10:52:51
    From Study Guide: # diagnose test application ipsmonitor <Enter> 1: Display IPS engine information 2: Toggle IPS engine enable/disable status --------> 3: Display restart log 4: Clear restart log 5: Toggle bypass status --------> 6: Submit attack characteristics now 10: IPS queue length 11: Clear IPS queue length 12: IPS L7 socket statistics 13: IPS session list 14: IPS NTurbo statistics ---omitted--- 97: Start all IPS engines 98: Stop all IPS engines 99: Restart all IPS engines and monitor --------> If the IPS caused high CPU usage problems, you can use the diagnose test application ipsmonitor command with option 5 to isolate where the problem might be. Option 5 enables IPS bypass mode. In this mode, the IPS is still running, but it is not inspecting traffic. If the CPU usage decreases after that, it usually indicates that the volume of traffic being inspected is too high for that FortiGate model. If the CPU usage remains high after you enable IPS bypass mode, it usually indicates a problem in the IPS engine that you must report to Fortinet Support.
  • Fatma Salih 2026-01-22 22:39:54
    Choosing A meaning to do option 5 again. Which shouldn’t be true. In the study we were advised to use option 99 or contact support. So am still not sure about C
  • Fatma Salih 2026-01-22 22:40:10
    Choosing A meaning to do option 5 again. Which shouldn’t be true. In the study we were advised to use option 99 or contact support. So am still not sure about C