View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam

NSE 6 - Network Security 7.6 Support Engineer Materials - Question #54 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit? (Choose one answer)

  • A. FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection, but is not performing inspection on those sessions.
  • B. FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection.
  • C. FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.
  • D. FortiGate is currently allowing new sessions and will continue to allow sessions if memory increases another 6%.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (2 votes) 100%

Community Explanations & Comments (2)

Adam 9 months ago
Selected: A
From Study Guide:
What Happens During Conserve Mode? (Contd)
-> For traffic that requires proxy-based inspection (and if memory usage has not exceeded the extreme threshold):
config system global
set av-failopen [off | pass | one-shot]
end
...
pass (default): All new sessions pass without inspection
...
-> The av-failopen setting also applies to flow-based antivirus inspection
Anonymous User 6 months ago
Selected: A
Network_Security_Support_Engineer_7.6_Study_Guide - Page 60 - 62