Network Application Diagnosis Quiz

Play an AI-generated podcast conversation about this lesson

Which command can be used to display statistics and configuration information about a feature or process in FortiGate?

diagnose (correct)
execute
restart
monitor

What triggers FortiGate's conserve mode?

CPU usage
Memory usage (correct)
Disk usage
Network traffic

What is the purpose of conserve mode in FortiGate?

To increase memory usage
To increase CPU usage
To improve network traffic
To protect against unresponsiveness due to low memory (correct)

What is the threshold at which FortiGate starts dropping new sessions?

95% (B) Signup and view all the answers

What is the purpose of the CLI command 'diagnose sys top'?

To identify which process is using too much memory (C) Signup and view all the answers

What increases memory use beyond simple firewall policies in FortiGate?

Antivirus (A) Signup and view all the answers

How many conserve modes does FortiGate have?

One (C) Signup and view all the answers

What happens when FortiGate's memory use goes below the set threshold?

FortiGate exits conserve mode (B) Signup and view all the answers

What is the purpose of the Extreme threshold in FortiGate?

To start dropping new sessions (D) Signup and view all the answers

What is the purpose of the Red threshold in FortiGate?

To enter conserve mode (C) Signup and view all the answers

Which command can be used to change the default conserve mode threshold values?

config system global (A) Signup and view all the answers

What happens if the GUI is unresponsive while FortiGate is in memory conserve mode?

The GUI logs become inaccessible (C) Signup and view all the answers

Which setting is used to configure how sessions fail-open during conserve mode for proxy-based inspection?

av-failopen-session (A) Signup and view all the answers

What does the av-failopen setting 'one-shot' do during conserve mode for proxy-based inspection?

Similar to pass, but you must manually change the av-failopen setting to restart inspection after FortiGate exits conserve mode (D) Signup and view all the answers

Which engine handles all flow-based inspection while FortiGate is in conserve mode?

IPS engine (C) Signup and view all the answers

What happens if IPS fail-open is enabled during conserve mode for flow-based inspection?

The IPS engine does not perform any scan, but allows new packets (A) Signup and view all the answers

Which UTM profiles do not work with nTurbo when flow-based inspection is enabled on FortiGate?

Mixed UTM profiles using proxy-based inspection (B) Signup and view all the answers

What is the default setting for av-failopen-session during conserve mode for proxy-based inspection?

Disabled (B) Signup and view all the answers

Which command is used to configure IPS fail-open setting during conserve mode for flow-based inspection?

config ips global (C) Signup and view all the answers

What does the setting av-failopen-session do during conserve mode for proxy-based inspection?

Applies the action configured in av-failopen (A) Signup and view all the answers