FORTINET-NSE123 Practice Test 16 — 15 Questions

Question 1

An administrator is troubleshooting a configuration synchronization failure in an HA cluster. Which CLI command forces an immediate configuration synchronization from the primary unit to the secondary unit?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

execute ha synchronize. The execute ha synchronize command forces manual synchronization of configuration or sessions in an HA cluster.

Answer

execute ha synchronize config

Answer

diagnose ha sync-now

Answer

config system ha force-sync

Question 2

An administrator wants to check the connection status of Security Fabric telemetry between the root FortiGate and downstream devices. Where is the Security Fabric status viewed?

Accepted Answer

Security Fabric > Topology. Security Fabric status and topology are viewed under Security Fabric > Topology or Security Fabric Setup.

Answer

System > Security Fabric Settings

Answer

Monitor > Fabric Monitor

Answer

Dashboard > Fabric Health

Question 3

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

Accepted Answer

System Resources. The System Resources widget provides real-time graphs and metrics for CPU, memory, and disk utilization on the FortiGate dashboard.

Answer

FortiView Sessions

Answer

Log Rate

Answer

License Information

Question 4

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

Accepted Answer

Network Interfaces widget on the Dashboard. The Network Interfaces widget displays real-time bandwidth and traffic rates per interface.

Answer

FortiView > Interfaces

Answer

System > Network > Performance

Answer

Log & Report > Bandwidth Monitor

Question 5

An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?

Accepted Answer

VPN > SSL-VPN Settings (Server Certificate field). SSL VPN settings, including the server certificate selection, are configured under VPN > SSL-VPN Settings.

Answer

Policy & Objects > SSL Settings

Answer

System > Certificates > SSL-VPN

Answer

Security Fabric > VPN Settings

Question 6

An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)

Accepted Answer

Local disk (internal hard drive or flash storage). FortiGate supports logging locally to internal storage/hard drive, forwarding to FortiAnalyzer, and forwarding to Syslog servers.

Answer

Bluetooth pairing with a mobile phone

Answer

Local printer connected via USB

Question 7

An administrator wants to check the operational status and firmware version of all connected FortiExtender devices managed by the FortiGate. Which menu path should they follow?

Accepted Answer

Security Fabric > Managed Devices. Managed FortiExtender devices are monitored and configured under the Managed Devices menu in the FortiGate GUI.

Answer

System > FortiExtender

Answer

Policy & Objects > Device Inventory

Answer

Network > FortiExtender

Question 8

An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?

Accepted Answer

Configure trusted hosts for administrator accounts to limit access to specific IP ranges.. Securing management access involves restricting access via trusted hosts, enforcing strong administrator passwords, and disabling insecure protocols like HTTP and telnet.

Answer

Set the administrative idle timeout to unlimited for convenience.

Answer

Use default admin credentials across all deployed firewalls.

Question 9

An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)

Accepted Answer

Log & Report menu in the web-based manager with filter and search options. Logs can be searched and filtered using the Log & Report menu in the GUI or via specialized log search CLI commands.

Answer

Restarting the routing daemon (gated)

Answer

Editing the FortiOS kernel source code directly

Answer

Running execute factory-reset

Question 10

An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?

Accepted Answer

System > Settings > Backup Configuration. To back up the configuration from the GUI, the administrator navigates to System > Settings or clicks the admin profile name in the top right corner and selects Configuration > Backup.

Answer

System > Firmware > Backup

Answer

Log & Report > Log Settings > Backup

Answer

Security Fabric > Settings > Export

Question 11

An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?

Accepted Answer

execute ping <syslog-server-ip>. To troubleshoot syslog/remote logging, administrators can use packet sniffing ('diagnose sniffer packet') and test connectivity ('execute ping' or 'execute telnet').

Answer

diagnose debug flow filter

Answer

execute factory-reset

Answer

get system arps

Question 12

An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?

Accepted Answer

Hardware Status widget. The Hardware Status widget displays temperature sensors, fan speeds, and power supply statuses.

Answer

Device Inventory

Answer

Power Monitor

Answer

System Resources

Question 13

An administrator needs to verify the license status and serial number of a managed FortiSwitch connected to the FortiGate. Where can managed switches be viewed in the web-based manager?

Accepted Answer

WiFi & Switch Controller > Managed FortiSwitches. Managed switches are managed and viewed under WiFi & Switch Controller (or Managed Devices depending on FortiOS version).

Answer

Network > Switch Controller

Answer

System > FortiSwitch

Answer

Security Fabric > FortiSwitch

Question 14

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

Accepted Answer

Configure Trusted Hosts on the administrator account to restrict management login to specific IP addresses.. Securing administrative access involves restricting trusted hosts and enforcing HTTPS/SSH with strong passwords.

Answer

Enable Telnet for administrative CLI access.

Answer

Use default admin accounts with blank passwords.

Answer

Disable password complexity requirements globally.

Question 15

An administrator is troubleshooting a DHCP service running on a FortiGate interface. Which THREE commands or tools can be used to verify DHCP status and leases? (Choose three)

Accepted Answer

execute dhcp lease-list. DHCP status and leases can be verified using execute dhcp lease-list, checking system DHCP configuration via show system dhcp-server, and viewing interface settings.

Answer

FortiView > DHCP Sessions

Answer

diagnose firewall dhcp-drop list