View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #4 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit, As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What could be the possible reason of the diagnose output shown in the exhibit? (Choose one answer)

  • A. There is no firewall policy configured with an IPS security profile.
  • B. FortiGate entered into IPS fail open state.
  • C. Administrator entered the command diagnose test application ipsmonitor 5.
  • D. Administrator entered the command diagnose test application ipsmonitor 99.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (3 votes) 100%

Community Explanations & Comments (3)

Sanjay Jairaj 1 year ago
Selected: A
Fortinet’s IPS engine spawns child processes only when the IPS service is actively used. The engine‑count parameter reports the number of IPS engine processes currently running
fortinetweb.s3.amazonaws.com
. A value of 0 means no engines are running. Using ipsmonitor 5 toggles IPS bypass mode and does not stop all engines
blog.boll.ch
, and ipsmonitor 99 restarts all IPS engines and monitors
blog.boll.ch
. Therefore neither option C nor D explains why there are zero engines. The only plausible reason is that there are no firewall policies referencing an IPS profile, so the IPS engine is never spawned and the engine count remains zero.

Answer: A
CABGroup 8 months ago
Selected: A
a
Anonymous User 1 month ago
Selected: A
A