View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #7 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. Based on this partial configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two answers)

  • A. Administrators cannot change the configuration.
  • B. FortiGate skips quarantine actions.
  • C. Administrators must restart FortiGate to allow new sessions.
  • D. FortiGate drops new sessions requiring inspection.
Correct Answer: A,B

Brave-Dump Community Votes

Answer: A, B (11 votes) 73.33%
Answer: B, D (3 votes) 20%
Answer: A (1 vote) 6.67%

Community Explanations & Comments (15)

Daniel 1 year ago
Selected: A, B
Correct options
Lokesh Kumar Verma 1 year ago
Selected: A, B
Page number 552-553 of FortiGate_7.6_Administrator_Study_Guide specify that A,B
Mohammed Ali 1 year ago
Selected: B, D
Outcome Description
✅ FortiGate drops new sessions requiring inspection To preserve resources, FortiGate may stop accepting new sessions that require deep inspection, such as antivirus or IPS.
✅ FortiGate skips quarantine actions Quarantine actions are resource-intensive, so FortiGate may bypass them to conserve memory.
Guilherme Bastos 3 months ago
With the config "set failopen enable", firewall bypasses packets without inspection, so D is incorrect
Brave-Dumps.com Admin 1 year ago
Selected: A, B
A,B Correct
Jay gabasa 1 year ago
Selected: B, D
Admin cannot change the configs only in extreme conserve mode only.
Antonio Sixto 11 months ago
Selected: A
FortiOS 7.6.4 Administration Guide

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/2def7712-5e99-11f0-a9d0-d2b0d2e22f7d/FortiOS-7.6.4-Administration_Guide.pdf

pag. 3559
Antonio Sixto 11 months ago
Sorry answer A anb B
Antonio Sixto 11 months ago
Sorry answer A and B
Anonymous User 9 months ago
Selected: B, D
hey admin what is the correct ans???
Brave-Dumps.com Admin 9 months ago
A,B
Anonymous User 8 months ago
Selected: A, B
A and b
CABGroup 8 months ago
Selected: A, B
ab
Ronen Goldberg 8 months ago
Selected: A, B
D is incorrect because in page 502 it states: "The av-failopen setting defines the action that is applied to any proxy-based inspected traffic, while the unit is in conserve mode (and as long as the memory usage does not exceed the extreme threshold). This setting also applies to flow-based antivirus inspection"

Because of that its not true to say that it blocks any ispection, only the proxy ones or the flow based AV.
abdulrahman 7 months ago
Selected: A, B
i get that A,B are correct, but why D is not. from what i know the FGT drop new sessions always. and for the configuration in the question. it affect the current exist sessions, if it require SSL inspection it will pass it without inspection.
Anonymous User 7 months ago
Selected: A, B
FortiGate_7.6_Administrator_Study_Guide page 501
ali 5 months ago
Selected: A, B
What actions does FortiGate take to preserve memory while in conserve mode?
• FortiGate does not accept configuration changes, because they might increase memory usage.
• FortiGate does not run any quarantine action, including forwarding suspicious files to FortiSandbox.
Sidney 3 months ago
Selected: A, B
A & B
NGUINA EVONO Boniface Joel 1 month ago
Selected: A, B
AB