FORTINET-NSE123 Nse 3 Fortigate Operational Fundamentals — All Questions With Answers

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator suspects a routing loop or gateway failure and needs to test basic IP connectivity to the default gateway with a specified source IP. Which CLI command allows specifying the source IP for a ping test?

Question 9hardmultiple choice

An administrator needs to verify whether a specific security profile (such as an Antivirus or Web Filter profile) is currently referenced by any firewall policy. Which CLI command helps trace object dependencies?

Question 10hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to flush all current entries from the FortiGate session table to resolve a stubborn state synchronization issue. Which CLI command achieves this?

Question 11mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure an idle timeout for administrative web GUI sessions to enhance security. Where is this setting located?

Question 12mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the current DNS server IP addresses configured on the FortiGate via the CLI. Which command should be used?

Question 13hardmultiple choice

An administrator wants to verify which configuration revision history is currently active and wants to roll back to a previous revision. Where can configuration revisions be managed in the web-based manager?

Question 14hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a configuration synchronization failure in an HA cluster. Which CLI command forces an immediate configuration synchronization from the primary unit to the secondary unit?

Question 15easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to search for a specific user's web browsing logs from earlier in the day. Which menu should they open in the web-based manager?

Question 16mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check the status of static routes configured on the FortiGate. Which CLI command lists all static routes?

Question 17easymultiple choice

Where can an administrator view a summary of system alerts and warning messages directly in the web-based manager without navigating to full log reports?

Question 18mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the license status and serial number of a managed FortiSwitch connected to the FortiGate. Where can managed switches be viewed in the web-based manager?

Question 19easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the connection status of Security Fabric telemetry between the root FortiGate and downstream devices. Where is the Security Fabric status viewed?

Question 20hardmultiple choice

An administrator suspects memory fragmentation or a memory leak in a specific daemon (e.g., wad). Which CLI command provides detailed memory allocation statistics per daemon?

Question 21mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify whether FortiGuard web filtering rating lookups are succeeding for specific categories. Which CLI command tests web filter rating lookups for a specific URL?

Question 22mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to modify the TCP session timeout for specific services. Where are global system timeout values configured in the CLI?

Question 23mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure SNMP v3 monitoring on the FortiGate for integration with a network management system (NMS). Where is SNMP configured in the web-based manager?

Question 24hardmultiple choice

An administrator needs to verify the status of hardware acceleration (NP processors) and check whether traffic is offloaded to the NP chips. Which CLI command displays NP processor status and offloaded session counters?

Question 25hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check system performance and resource bottlenecks on a FortiGate device using the CLI. Which TWO commands can be used to display CPU, memory, and process-level utilization? (Choose two)

Question 26mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a FortiGate device where traffic passing through a specific firewall policy is failing. Which TWO dashboard widgets or monitoring views should the administrator inspect to verify live traffic status and policy hits? (Choose two)

Question 27hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a routing and connectivity issue on the FortiGate. Which THREE CLI commands can be used to test network reachability and path characteristics? (Choose three)

Question 28hardmulti select

An administrator is troubleshooting a packet flow issue and needs to capture live traffic on the FortiGate CLI. Which THREE parameters or options must be specified when configuring the diagnose sniffer packet command? (Choose three)

Question 29hardmulti select

An administrator is troubleshooting a DHCP service running on a FortiGate interface. Which THREE commands or tools can be used to verify DHCP status and leases? (Choose three)

Question 30hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify DNS and time synchronization settings to ensure accurate log timestamps and FortiGuard connectivity. Which THREE settings or commands should be verified? (Choose three)

Question 31mediummultiple choice

A network administrator is troubleshooting traffic passing through a FortiGate using the CLI command 'diagnose debug flow'. Before capturing traffic, what command must be executed to ensure the debug output appears in the current CLI session?

Question 32hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator notices that configuration changes made via the CLI are not persisting after a device reboot. What is the most likely reason for this behavior?

Question 33easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where in the FortiGate GUI can an administrator view a summary of detected security incidents, top applications, and top bandwidth users across the network?

Question 34easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status and firmware version of all connected FortiExtender devices managed by the FortiGate. Which menu path should they follow?

Question 35hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify whether a specific security profile (e.g., Antivirus) is actively inspecting traffic matching a firewall policy. Which CLI command displays the detailed runtime statistics and counter hits for security profiles bound to a policy ID?

Question 36mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is configuring a new firewall policy to allow internal users to access the internet. Which parameter is mandatory when defining a IPv4 firewall policy in FortiOS?

Question 37mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing the configuration options available under System > Admin Settings in the FortiGate GUI. Which TWO settings can be configured in this menu?

Question 38mediummultiple choice

Review the full subnetting walkthrough →

A network administrator is troubleshooting an intermittent connectivity issue between an internal subnet and a remote branch office. The FortiGate is configured with a static route to the remote network, but traffic is sometimes dropped. The administrator suspects that the FortiGate is not receiving return traffic because the next-hop router is not responding to ARP requests. Which CLI command should the administrator use to verify the ARP resolution for the next-hop IP address?

Question 39hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A network engineer is troubleshooting a FortiGate HA cluster where the primary unit has failed over to the secondary unit unexpectedly. They need to check the HA status and the reason for the failover. Which CLI command should they use to view detailed HA information, including the last failover reason?

Question 40hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A security administrator is investigating a suspicious traffic pattern where a specific internal host is repeatedly attempting to connect to an external IP address on port 445. The administrator wants to capture packets related to this host to analyze the traffic. Which CLI command should be used to capture packets for this specific host without disrupting other traffic?

Question 41mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?

Question 42easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?

Question 43easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?

Question 44easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

Question 45hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

Question 46easymultiple choice

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Question 47hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Question 48mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

Question 49easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

Question 50hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

Question 51mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

Question 52hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

Question 53mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Question 54hardmultiple choice

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

Question 55mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

Question 56easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?

Question 57easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

Question 58hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?

Question 59mediummultiple choice

An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?

Question 60easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

Question 61mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?

Question 62hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?

Question 63easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

Question 64mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

Question 65easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?

Question 66easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?

Question 67mediummultiple choice

An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?

Question 68hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?

Question 69easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?

Question 70mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?

Question 71easymultiple choice

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

Question 72hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?

Question 73easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

Question 74hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

Question 75mediummultiple choice

Read the full NAT/PAT explanation →

An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?

Question 76easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?

Question 77mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?

Question 78hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?

Question 79mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?

Question 80easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?

Question 81hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?

Question 82easymultiple choice

An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?

Question 83hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?

Question 84hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?

Question 85easymultiple choice

An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?

Question 86mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

Question 87mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)

Question 88hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)

Question 89mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)

Question 90mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)

Question 91hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)

Question 92mediummulti select

An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)

Question 93hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)

Question 94mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)

Question 95mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)

Question 96mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)

Question 97easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

Question 98mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?

Question 99hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?

Question 100mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?

Question 101easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?

Question 102hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?

Question 103easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?

Question 104mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?

Question 105hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?

Question 106hardmulti select

An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?

Question 107easymulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which TWO dashboard widgets are commonly used to monitor system performance and health on a FortiGate?

Question 108mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?

Question 109mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A network administrator is troubleshooting an intermittent connectivity issue on a FortiGate 100F running FortiOS 7.2. They suspect that the problem is related to the session table filling up. Which CLI command should they use to view the current session count and the maximum session limit?

Question 1mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator notices that the FortiGate configuration changes made during troubleshooting were lost after an unexpected power outage. Where should the administrator check to ensure that the current running configuration is permanently saved?

Question 2hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a policy match issue and needs to inspect a specific security policy's hit count and ID directly from the CLI. Which CLI command should the administrator use to list all firewall policies with their internal IDs and rule details?

Question 3mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify whether the FortiGate unit can successfully communicate with the FortiGuard distribution servers for license and signature updates. Which command should be run in the CLI to test this specific connectivity?

Question 4easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to inspect historical logs stored locally on the FortiGate hard drive. Which menu should they open?

Question 5hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the hardware sensor status (fans, power supplies, temperatures) of a high-end FortiGate unit. Which command provides this hardware health status?

Question 6mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify which administrator is currently logged into the FortiGate and from which IP address. Which CLI command should be used?

Question 7easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to customize the dashboard view by adding a new widget. What is the standard method to add widgets in the FortiGate GUI?

Question 8hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator suspects a routing loop or gateway failure and needs to test basic IP connectivity to the default gateway with a specified source IP. Which CLI command allows specifying the source IP for a ping test?

Question 9hardmultiple choice

An administrator needs to verify whether a specific security profile (such as an Antivirus or Web Filter profile) is currently referenced by any firewall policy. Which CLI command helps trace object dependencies?

Question 10hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to flush all current entries from the FortiGate session table to resolve a stubborn state synchronization issue. Which CLI command achieves this?

Question 11mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure an idle timeout for administrative web GUI sessions to enhance security. Where is this setting located?

Question 12mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the current DNS server IP addresses configured on the FortiGate via the CLI. Which command should be used?

Question 13hardmultiple choice

An administrator wants to verify which configuration revision history is currently active and wants to roll back to a previous revision. Where can configuration revisions be managed in the web-based manager?

Question 14hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a configuration synchronization failure in an HA cluster. Which CLI command forces an immediate configuration synchronization from the primary unit to the secondary unit?

Question 15easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to search for a specific user's web browsing logs from earlier in the day. Which menu should they open in the web-based manager?

Question 16mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check the status of static routes configured on the FortiGate. Which CLI command lists all static routes?

Question 17easymultiple choice

Where can an administrator view a summary of system alerts and warning messages directly in the web-based manager without navigating to full log reports?

Question 18mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the license status and serial number of a managed FortiSwitch connected to the FortiGate. Where can managed switches be viewed in the web-based manager?

Question 19easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the connection status of Security Fabric telemetry between the root FortiGate and downstream devices. Where is the Security Fabric status viewed?

Question 20hardmultiple choice

An administrator suspects memory fragmentation or a memory leak in a specific daemon (e.g., wad). Which CLI command provides detailed memory allocation statistics per daemon?

Question 21mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify whether FortiGuard web filtering rating lookups are succeeding for specific categories. Which CLI command tests web filter rating lookups for a specific URL?

Question 22mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to modify the TCP session timeout for specific services. Where are global system timeout values configured in the CLI?

Question 23mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure SNMP v3 monitoring on the FortiGate for integration with a network management system (NMS). Where is SNMP configured in the web-based manager?

Question 24hardmultiple choice

An administrator needs to verify the status of hardware acceleration (NP processors) and check whether traffic is offloaded to the NP chips. Which CLI command displays NP processor status and offloaded session counters?

Question 25hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check system performance and resource bottlenecks on a FortiGate device using the CLI. Which TWO commands can be used to display CPU, memory, and process-level utilization? (Choose two)

Question 26mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a FortiGate device where traffic passing through a specific firewall policy is failing. Which TWO dashboard widgets or monitoring views should the administrator inspect to verify live traffic status and policy hits? (Choose two)

Question 27hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a routing and connectivity issue on the FortiGate. Which THREE CLI commands can be used to test network reachability and path characteristics? (Choose three)

Question 28hardmulti select

An administrator is troubleshooting a packet flow issue and needs to capture live traffic on the FortiGate CLI. Which THREE parameters or options must be specified when configuring the diagnose sniffer packet command? (Choose three)

Question 29hardmulti select

An administrator is troubleshooting a DHCP service running on a FortiGate interface. Which THREE commands or tools can be used to verify DHCP status and leases? (Choose three)

Question 30hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify DNS and time synchronization settings to ensure accurate log timestamps and FortiGuard connectivity. Which THREE settings or commands should be verified? (Choose three)

Question 31mediummultiple choice

A network administrator is troubleshooting traffic passing through a FortiGate using the CLI command 'diagnose debug flow'. Before capturing traffic, what command must be executed to ensure the debug output appears in the current CLI session?

Question 32hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator notices that configuration changes made via the CLI are not persisting after a device reboot. What is the most likely reason for this behavior?

Question 33easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where in the FortiGate GUI can an administrator view a summary of detected security incidents, top applications, and top bandwidth users across the network?

Question 34easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status and firmware version of all connected FortiExtender devices managed by the FortiGate. Which menu path should they follow?

Question 35hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify whether a specific security profile (e.g., Antivirus) is actively inspecting traffic matching a firewall policy. Which CLI command displays the detailed runtime statistics and counter hits for security profiles bound to a policy ID?

Question 36mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is configuring a new firewall policy to allow internal users to access the internet. Which parameter is mandatory when defining a IPv4 firewall policy in FortiOS?

Question 37mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing the configuration options available under System > Admin Settings in the FortiGate GUI. Which TWO settings can be configured in this menu?

Question 38mediummultiple choice

Review the full subnetting walkthrough →

A network administrator is troubleshooting an intermittent connectivity issue between an internal subnet and a remote branch office. The FortiGate is configured with a static route to the remote network, but traffic is sometimes dropped. The administrator suspects that the FortiGate is not receiving return traffic because the next-hop router is not responding to ARP requests. Which CLI command should the administrator use to verify the ARP resolution for the next-hop IP address?

Question 39hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A network engineer is troubleshooting a FortiGate HA cluster where the primary unit has failed over to the secondary unit unexpectedly. They need to check the HA status and the reason for the failover. Which CLI command should they use to view detailed HA information, including the last failover reason?

Question 40hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A security administrator is investigating a suspicious traffic pattern where a specific internal host is repeatedly attempting to connect to an external IP address on port 445. The administrator wants to capture packets related to this host to analyze the traffic. Which CLI command should be used to capture packets for this specific host without disrupting other traffic?

Question 41mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?

Question 42easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?

Question 43easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?

Question 44easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

Question 45hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

Question 46easymultiple choice

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Question 47hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Question 48mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

Question 49easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

Question 50hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

Question 51mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

Question 52hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

Question 53mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Question 54hardmultiple choice

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

Question 55mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

Question 56easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?

Question 57easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

Question 58hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?

Question 59mediummultiple choice

An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?

Question 60easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

Question 61mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?

Question 62hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?

Question 63easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

Question 64mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

Question 65easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?

Question 66easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?

Question 67mediummultiple choice

An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?

Question 68hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?

Question 69easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?

Question 70mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?

Question 71easymultiple choice

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

Question 72hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?

Question 73easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

Question 74hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

Question 75mediummultiple choice

Read the full NAT/PAT explanation →

An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?

Question 76easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?

Question 77mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?

Question 78hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?

Question 79mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?

Question 80easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?

Question 81hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?

Question 82easymultiple choice

An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?

Question 83hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?

Question 84hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?

Question 85easymultiple choice

An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?

Question 86mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

Question 87mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)

Question 88hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)

Question 89mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)

Question 90mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)

Question 91hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)

Question 92mediummulti select

An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)

Question 93hardmulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)

Question 94mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)

Question 95mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)

Question 96mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)

Question 97easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

Question 98mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?

Question 99hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?

Question 100mediummultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?

Question 101easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?

Question 102hardmultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?

Question 103easymultiple choice

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?

Question 104mediummulti select

Read the full Nse 3 Fortigate Operational Fundamentals explanation →

When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?

Question 105hardmulti select