Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.
Start practicing
Nse 3 Fortigate Operational Fundamentals — choose a session length
Free · No account required
Domain overview
This domain covers day-to-day operation of a FortiGate in the web-based manager: dashboard widgets and customization, checking whether the device runs in NAT or Transparent mode, reading traffic and bandwidth graphs, and following where logs actually go. Questions are scenario-based, asking which widget, menu, or setting an administrator uses to accomplish a specific operational task.
Exam objectives
Customizing dashboard widgets and adding or removing monitors in the FortiGate GUI
Locating the System Information widget to confirm NAT versus Transparent operating mode
Using the Bandwidth widget or interface graphs for historical traffic over time
Tracing logged traffic through Log & Report and verifying log settings and destinations
Assuming a policy's log setting guarantees visible logs, ignoring whether logging is enabled globally and where logs are stored or sent
Confusing NAT and Transparent mode indicators, or looking for the mode under network interface settings instead of the dashboard System Information widget
Expecting the dashboard to show historical bandwidth by default, when many widgets must be added or configured first
Click any question to see the full explanation and answer options, or start a focused practice session above.
An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?
2Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?
3An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?
4An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?
5An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?
6An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?
7An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?
8An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?
9Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?
10An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?
11An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?
12An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?
13An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?
14An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?
15An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?
16Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?
17Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?
18An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?
19An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?
20Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?
21An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?
22An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?
23An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?
24An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?
25Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?
26An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?
27An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?
28An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?
29An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?
30An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?
31An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?
32An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?
33An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?
34An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?
35An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?
36An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?
37An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?
38An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?
39An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?
40An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?
41An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?
42An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?
43An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?
44An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?
45An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?
46An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)
47An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)
48An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)
49An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)
50An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)
51An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)
52An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)
53An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)
54An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)
55An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)
56An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)
57An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?
58An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?
59An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?
60A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?
61Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?
62An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?
63How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?
64When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?
65An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?
66An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?
67Which TWO dashboard widgets are commonly used to monitor system performance and health on a FortiGate?
68When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?
69A network administrator is troubleshooting an intermittent connectivity issue on a FortiGate 100F running FortiOS 7.2. They suspect that the problem is related to the session table filling up. Which CLI command should they use to view the current session count and the maximum session limit?
Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.
The Courseiva FORTINET-NSE123 question bank contains 69 questions in the Nse 3 Fortigate Operational Fundamentals domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Nse 3 Fortigate Operational Fundamentals domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included