FORTINET-NSE123 Nse 3 Fortigate Operational Fundamentals — 30 Questions

Question 1

An administrator needs to verify the current DNS server IP addresses configured on the FortiGate via the CLI. Which command should be used?

Accepted Answer

get system dns. The show system dns command displays the configured primary and secondary DNS server addresses.

Answer

execute show dns

Answer

diagnose sys dns list

Answer

show router dns

Question 2

An administrator is reviewing the configuration options available under System > Admin Settings in the FortiGate GUI. Which TWO settings can be configured in this menu?

Accepted Answer

HTTP and HTTPS administrative service ports. System > Admin Settings allows administrators to configure administrative access ports (HTTP/HTTPS), idle timeout, and trusted hosts.

Answer

DHCP server lease time

Answer

Firewall policy default action

Question 3

An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?

Accepted Answer

Click the administrator profile name at the top right of the GUI > Configuration > Backup. Configuration backup and restore functions are typically located under System > Configuration or via the administrator profile dropdown menu.

Answer

System > Settings > Maintenance

Answer

Security Fabric > Settings > Export

Answer

Log & Report > Backup Settings

Question 4

Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?

Accepted Answer

Log & Report > System Events. Log & Report is the centralized location for viewing traffic, event, and security logs on the FortiGate.

Answer

Security Fabric > Audit

Answer

System > Advanced

Answer

Monitor > Routing Monitor

Question 5

An administrator notices that the FortiGate configuration changes made during troubleshooting were lost after an unexpected power outage. Where should the administrator check to ensure that the current running configuration is permanently saved?

Accepted Answer

FortiGate automatically saves running configurations to non-volatile memory immediately upon successful CLI or GUI commit actions.. Configuration changes in the CLI or GUI must be saved to flash storage. The active running configuration can be backed up or saved, but changes made via certain methods or scripts require explicit saves.

Answer

System > Admin > Settings

Answer

System > Configuration > Backup

Answer

The CLI command execute backup config

Question 6

An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?

Accepted Answer

System Resources. The System Resources widget displays real-time CPU and memory usage, allowing administrators to monitor resource consumption.

Answer

FortiView Sessions

Answer

License Information

Answer

Network Interfaces

Question 7

An administrator is troubleshooting a policy match issue and needs to inspect a specific security policy's hit count and ID directly from the CLI. Which CLI command should the administrator use to list all firewall policies with their internal IDs and rule details?

Accepted Answer

show firewall policy. To view firewall policies via CLI, the command show firewall policy is used inside the configuration context.

Answer

get system performance

Answer

diagnose sys session list

Answer

get system status

Question 8

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

Accepted Answer

FortiView > Applications. FortiView is the primary monitoring and visualization tool on FortiGate for tracking top applications, sources, destinations, and threats.

Answer

Log & Report > Forward Traffic

Answer

Security Fabric > Topology

Answer

System > FortiGuard

Question 9

An administrator needs to verify whether the FortiGate unit can successfully communicate with the FortiGuard distribution servers for license and signature updates. Which command should be run in the CLI to test this specific connectivity?

Accepted Answer

execute update-now. The update status and connectivity to FortiGuard can be tested using the execute update-now or diagnostic commands for FortiGuard override/servers.

Answer

diagnose sys top

Answer

ping 8.8.8.8

Answer

execute FortiGuard-test

Question 10

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

Accepted Answer

get router info routing-table all. The command get router info routing-table all displays the active routing table known to the FortiGate routing daemon.

Answer

execute traceroute

Answer

get system interface

Answer

diagnose firewall IP-antibot list

Question 11

An administrator wants to inspect historical logs stored locally on the FortiGate hard drive. Which menu should they open?

Accepted Answer

Log & Report > Forward Traffic. Local logs are viewed under Log & Report.

Answer

Dashboard > Log Summary

Answer

System > Log Config

Answer

Monitor > Log Viewer

Question 12

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Accepted Answer

Dashboard > System Information widget. The System Information widget on the dashboard displays the firmware version, hostname, serial number, and uptime.

Answer

Log & Report > System Events

Answer

Policy & Objects > Addresses

Answer

Network > Interfaces

Question 13

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Accepted Answer

execute reboot. The execute reboot command safely restarts the FortiGate device.

Answer

execute factory-reset

Answer

system restart

Answer

config system global set reboot

Question 14

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

Accepted Answer

diagnose sniffer packet. The diagnose sniffer packet command is the standard tool for capturing and displaying packets on a FortiGate CLI.

Answer

execute ping-packet

Answer

execute trace-route

Answer

get system interface traffic

Question 15

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

Accepted Answer

Security Fabric > Topology. The Security Fabric widget or Security Fabric topology view provides visibility into connected fabric devices.

Answer

FortiView Threat Map

Answer

Security Fabric Rating

Answer

System Resources

Question 16

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

Accepted Answer

Policy & Objects > Firewall Policy view, by checking the 'Hit Count' column. Firewall policy hit counters are visible directly in the Policy & Objects > Firewall Policy view when the column is enabled.

Answer

FortiView > Policies view

Answer

System > Feature Visibility > Policy Statistics

Answer

Log & Report > Traffic Log Summary

Question 17

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

Accepted Answer

System > Administrators. Administrator accounts and profiles are managed under System > Administrators.

Answer

Policy & Objects > Admins

Answer

Security Fabric > Access Control

Answer

User & Authentication > Administrator Users

Question 18

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

Accepted Answer

get system ha status. The get system ha status command provides detailed statistics and synchronization state for high availability clusters.

Answer

diagnose ha group list

Answer

show HA cluster

Answer

get system status HA

Question 19

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Accepted Answer

execute dns-lookup [hostname]. The execute ping or execute dns-lookup commands are used to test name resolution in FortiOS.

Answer

ping [hostname]

Answer

get system dns

Answer

diagnose test resolv [hostname]

Question 20

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

Accepted Answer

diagnose sys session filter src [IP] followed by diagnose sys session list. The diagnose sys session filter command combined with list allows filtering and viewing active sessions.

Answer

show firewall session [IP]

Answer

execute session clear [IP]

Answer

get system session list