Network Application Diagnosis Quiz

Which command can be used to display statistics and configuration information about a feature or process in FortiGate?

diagnose

What triggers FortiGate's conserve mode?

Memory usage

What is the purpose of conserve mode in FortiGate?

To protect against unresponsiveness due to low memory

What is the threshold at which FortiGate starts dropping new sessions?

95% Signup and view all the answers

What is the purpose of the CLI command 'diagnose sys top'?

To identify which process is using too much memory Signup and view all the answers

What increases memory use beyond simple firewall policies in FortiGate?

Antivirus Signup and view all the answers

How many conserve modes does FortiGate have?

One Signup and view all the answers

What happens when FortiGate's memory use goes below the set threshold?

FortiGate exits conserve mode Signup and view all the answers

What is the purpose of the Extreme threshold in FortiGate?

To start dropping new sessions Signup and view all the answers

What is the purpose of the Red threshold in FortiGate?

To enter conserve mode Signup and view all the answers

Which command can be used to change the default conserve mode threshold values?

config system global Signup and view all the answers

What happens if the GUI is unresponsive while FortiGate is in memory conserve mode?

The GUI logs become inaccessible Signup and view all the answers

Which setting is used to configure how sessions fail-open during conserve mode for proxy-based inspection?

av-failopen-session Signup and view all the answers

What does the av-failopen setting 'one-shot' do during conserve mode for proxy-based inspection?

Similar to pass, but you must manually change the av-failopen setting to restart inspection after FortiGate exits conserve mode Signup and view all the answers

Which engine handles all flow-based inspection while FortiGate is in conserve mode?

IPS engine Signup and view all the answers

What happens if IPS fail-open is enabled during conserve mode for flow-based inspection?

The IPS engine does not perform any scan, but allows new packets Signup and view all the answers

Which UTM profiles do not work with nTurbo when flow-based inspection is enabled on FortiGate?

Mixed UTM profiles using proxy-based inspection Signup and view all the answers

What is the default setting for av-failopen-session during conserve mode for proxy-based inspection?

Disabled Signup and view all the answers

Which command is used to configure IPS fail-open setting during conserve mode for flow-based inspection?

config ips global Signup and view all the answers

What does the setting av-failopen-session do during conserve mode for proxy-based inspection?

Applies the action configured in av-failopen Signup and view all the answers