FORTINET-NSE123 Nse 3 Fortigate Operational Fundamentals Practice Test 4 — 15 Questions

Question 1

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Accepted Answer

Dashboard > System Information widget. The Dashboard's System Information widget displays the FortiGate's hostname, firmware version, serial number, uptime, and system resource usage immediately after login. This is the fastest way to verify the running firmware build.

Answer

Log & Report > System Events

Answer

Policy & Objects > Addresses

Answer

Network > Interfaces

Question 2

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Accepted Answer

execute reboot. 'execute reboot' is the correct FortiGate CLI command to perform a clean, graceful reboot that flushes buffers and stops services properly, avoiding filesystem or configuration corruption. It is the standard maintenance command used during scheduled windows and prompts for confirmation before restarting.

Answer

execute factory-reset

Answer

system restart

Answer

config system global set reboot

Question 3

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

Accepted Answer

diagnose sniffer packet. The FortiGate CLI command 'diagnose sniffer packet' captures live packets on a specified interface, allowing administrators to inspect traffic in real time. It supports filters, verbosity levels, and interface selection, making it the correct tool for troubleshooting intermittent latency at the packet level.

Answer

execute ping-packet

Answer

execute trace-route

Answer

get system interface traffic

Question 4

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

Accepted Answer

Security Fabric > Topology. The Security Fabric > Topology widget on the FortiGate dashboard visually displays the connected Security Fabric devices, their roles (root, downstream FortiGates, FortiSwitches, FortiAPs, FortiAnalyzer, etc.), and the links between them. It provides a real-time view of fabric health and device connectivity, making it the correct place to monitor fabric status and topology.

Answer

FortiView Threat Map

Answer

Security Fabric Rating

Answer

System Resources

Question 5

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

Accepted Answer

Policy & Objects > Firewall Policy view, by checking the 'Hit Count' column. In the FortiGate GUI, per-policy hit counters are displayed directly in the Policy & Objects > Firewall Policy view as a 'Hit Count' column (sometimes labeled 'Hits' or shown as bytes/packets). This lets an administrator quickly see which policies are matching traffic and which are not, making it the correct place to verify whether a specific rule is being hit.

Answer

FortiView > Policies view

Answer

System > Feature Visibility > Policy Statistics

Answer

Log & Report > Traffic Log Summary

Question 6

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

Accepted Answer

System > Administrators. Administrator accounts and their associated access profiles (permission sets) are created and managed under System > Administrators in the FortiGate GUI. This is the central location where you define local admin users, assign admin profiles, restrict trusted hosts, and configure authentication methods such as LDAP, RADIUS, or local passwords. The access profile itself is also defined here, controlling which VDOMs and functional areas each admin can view or modify.

Answer

Policy & Objects > Admins

Answer

Security Fabric > Access Control

Answer

User & Authentication > Administrator Users

Question 7

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

Accepted Answer

get system ha status. The correct CLI command to check HA synchronization status between primary and secondary FortiGate units is 'get system ha status'. This command displays the HA cluster status, including the primary unit, synchronization state, and member information.

Answer

diagnose ha group list

Answer

show HA cluster

Answer

get system status HA

Question 8

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Accepted Answer

execute dns-lookup [hostname]. The correct command is `execute dns-lookup [hostname]` because it directly queries the FortiGate's configured DNS servers to resolve a hostname, providing the exact IP resolution result needed to troubleshoot FortiGuard connectivity. This command uses the FortiGate's DNS resolver settings and returns the resolved IP address or an error, making it the most direct tool for DNS resolution testing. Other commands either perform ICMP checks, display DNS configuration, or are not valid FortiOS commands.

Answer

ping [hostname]

Answer

get system dns

Answer

diagnose test resolv [hostname]

Question 9

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

Accepted Answer

diagnose sys session filter src [IP] followed by diagnose sys session list. The correct approach is to apply a session filter with 'diagnose sys session filter src <IP>' and then run 'diagnose sys session list' to display only sessions matching that source. This is the standard FortiOS diagnostic workflow for isolating stuck or problematic sessions without dumping the entire session table. The filter persists until cleared with 'diagnose sys session filter clear' or the session is closed.

Answer

show firewall session [IP]

Answer

execute session clear [IP]

Answer

get system session list

Question 10

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

Accepted Answer

config system interface > edit port1 > set ip [IP] [netmask] > end. The correct sequence is 'config system interface > edit port1 > set ip [IP] [netmask] > end'. This enters the system interface configuration context, selects the port1 interface, sets the IP address and netmask, and saves the configuration. This is the standard FortiOS CLI syntax for changing an interface IP.

Answer

config router interface > edit port1 > set address [IP] > end

Answer

set interface port1 ip [IP] > save

Answer

execute set ip port1 [IP]

Question 11

Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?

Accepted Answer

Log & Report > Security Logs. In the FortiGate web-based manager (GUI), security threat summaries—including blocked malware, IPS events, and other UTM logs—are found under Log & Report > Security Logs. This section aggregates logs from all security profiles (antivirus, IPS, web filter, etc.) and provides filtering, drill-down, and visualization of detected threats. It is the central location for reviewing security events in real time or historically.

Answer

System > FortiGuard

Answer

Dashboard > Threat Map

Answer

Policy & Objects > Security Profiles

Question 12

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

Accepted Answer

Log Disk. The Log Disk widget on the FortiGate dashboard displays the current status and capacity of local storage used for logs (hard drive or log disk). It shows used versus total space, making it the correct widget for monitoring local storage capacity.

Answer

System Resources

Answer

Storage Manager

Answer

Hardware Status

Question 13

An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?

Accepted Answer

execute dhcp lease-list. The correct command is `execute dhcp lease-list`. This command is part of FortiOS's `execute` command tree, which contains operational commands for viewing dynamic runtime information. It queries the built-in DHCP server's lease database and displays active leases, including IP address, MAC address, hostname, lease expiry, and interface. It is the standard, documented way to verify DHCP assignments on a FortiGate without needing to inspect individual client devices.

Answer

diagnose system dhcp list

Answer

get router info dhcp

Answer

get system dhcp-server lease

Question 14

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

System > Settings. In the FortiGate web-based manager (GUI), system time and NTP configuration are located under System > Settings. This page allows the administrator to set the system time manually or configure NTP servers to synchronize the FortiGate's clock. Accurate time is critical for log timestamps, certificate validation, and scheduled tasks.

Answer

System > FortiGuard

Answer

Monitor > System Time

Answer

Log & Report > Log Settings

Question 15

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

Accepted Answer

Network Interfaces widget on the Dashboard. The Network Interfaces widget on the FortiGate dashboard displays real-time bandwidth consumption per interface, showing throughput in and out for each physical or logical interface. This widget is specifically designed to provide a quick view of interface utilization directly on the dashboard. It is the correct location for monitoring per-interface bandwidth in real time.

Answer

FortiView > Interfaces

Answer

System > Network > Performance

Answer

Log & Report > Bandwidth Monitor