FORTINET-NSE123 Nse 3 Fortigate Operational Fundamentals Practice Test 5 — 15 Questions

Question 1

An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?

Accepted Answer

System > FortiGuard. The System > FortiGuard page in the FortiGate web-based manager displays the FortiCare registration status along with the status and expiry of feature licenses such as FortiGuard security services (AV, IPS, Web Filtering, etc.). This is where administrators confirm that support and subscription entitlements are active.

Answer

Policy & Objects > Licenses

Answer

Security Fabric > Registration

Answer

Log & Report > License Audit

Question 2

An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?

Accepted Answer

execute restore config tftp [filename] [server-IP]. The correct CLI command to restore a configuration backup from a TFTP server on a FortiGate is 'execute restore config tftp [filename] [server-IP]'. This command initiates the restoration process, pulling the specified file from the TFTP server and applying it to the device. It is part of the 'execute' command family used for system-level operations.

Answer

config restore tftp [server-IP] [filename]

Answer

system restore backup [filename]

Answer

upload config tftp [server-IP]

Question 3

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

Accepted Answer

Log & Report > System Events. Log & Report > System Events is the correct location because it aggregates administrative activity logs, configuration change logs, and system-level alerts into a single chronological view. FortiGate categorizes these as 'event' logs, which include admin logins, config changes, and system events such as HA transitions or interface up/down. This is the only option that directly provides a unified, time-ordered list of these specific event types.

Answer

Log & Report > Forward Traffic

Answer

Dashboard > Event Summary

Answer

FortiView > Admins

Question 4

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

Accepted Answer

get system interface physical [interface-name] or diagnostics hardware deviceinfo nic [interface-name]. The correct command to verify operational status and packet error rates of a physical interface in FortiOS is 'get system interface physical [interface-name]' or 'diagnostics hardware deviceinfo nic [interface-name]'. The first command provides a summary of physical interface status, including link state, speed, duplex, and error counters. The second command gives detailed NIC-level statistics, including packet errors, drops, and other hardware-level counters. These are the standard FortiGate CLI commands for physical interface diagnostics.

Answer

show interface port2 stats

Answer

get system interface port2

Answer

execute interface check port2

Question 5

Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?

Accepted Answer

FortiView > Destinations. FortiView > Destinations is the built-in analytics view that aggregates log data in real time and displays the top destination IP addresses, countries, and domains accessed by internal users. It pulls from forward traffic logs and presents them in a sortable, drill-down dashboard, which is exactly what the question asks for. This is the standard location for monitoring user browsing destinations on a FortiGate.

Answer

Log & Report > Destination Summary

Answer

Policy & Objects > Destinations

Answer

Monitor > Routing Table

Question 6

An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?

Accepted Answer

IPsec & SSL VPN widget. The IPsec & SSL VPN widget on the FortiGate dashboard is specifically designed to display active VPN tunnels and connected remote users. It shows both IPsec and SSL VPN connections, including user names, assigned IPs, and tunnel status. This directly matches the administrator's requirement.

Answer

Remote Access Monitor

Answer

User Monitor

Answer

Network Interfaces

Question 7

An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?

Accepted Answer

config system global > set hostname [name] > end. The hostname of a FortiGate is configured under the system global configuration context. The correct sequence is to enter 'config system global', then use 'set hostname [name]', and finally 'end' to apply the change. This is the standard method for setting the device's hostname via the CLI, as documented in Fortinet's administration guide.

Answer

config system settings > set name [name] > end

Answer

set hostname [name]

Answer

execute hostname [name]

Question 8

An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?

Accepted Answer

Policy & Objects > SSL/SSH Inspection and System > Certificates. SSL/SSH inspection profiles are configured under Policy & Objects > SSL/SSH Inspection, where you define which traffic is deep-inspected, which categories are exempt, and which CA certificate is used for re-signing. Local CA and server certificates, along with their private keys, are managed under System > Certificates. Together these two locations cover the full certificate inspection workflow on a FortiGate.

Answer

Log & Report > Certificate Logs

Answer

VPN > Certificate Manager

Answer

Security Fabric > Inspection Settings

Question 9

An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?

Accepted Answer

High Availability widget. The High Availability widget on the FortiGate dashboard is the dedicated pane that shows HA cluster membership, each member's role (primary/secondary), and health indicators such as heartbeat status and uptime. It gives administrators an at-a-glance view of cluster health without navigating to system HA status pages.

Answer

Security Fabric Status

Answer

System Topology

Answer

Cluster Monitor

Question 10

An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?

Accepted Answer

Log & Report > Log Settings. Remote Syslog forwarding on FortiGate is configured under Log & Report > Log Settings, where the administrator enables 'Send logs to Syslog' and specifies the Syslog server IP, port, and facility. This is the standard GUI path for configuring remote logging destinations including Syslog, FortiAnalyzer, and FortiManager.

Answer

System > Syslog Server

Answer

Policy & Objects > Logging

Answer

Security Fabric > Log Forwarding

Question 11

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

Accepted Answer

System Resources widget (Process list). The System Resources widget includes a process list that shows real-time CPU and memory consumption per process on the FortiGate. This is the correct place to identify which daemon (e.g., ipsengine, wad, miglogd) is consuming CPU. It updates live and can be sorted by CPU usage.

Answer

Monitor > Performance Log

Answer

FortiView > Processes

Answer

Log & Report > CPU Logs

Question 12

An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?

Accepted Answer

diagnose hardware deviceinfo nic [interface]. The correct CLI command to inspect kernel buffer drops and interface error counters is 'diagnose hardware deviceinfo nic [interface]'. This command provides detailed NIC-level statistics including RX/TX errors, drops, and buffer-related counters for the specified interface.

Answer

execute interface-test drops

Answer

show interface drops

Answer

get system drop-stats

Question 13

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

Accepted Answer

Bandwidth widget. The Bandwidth widget on the FortiGate dashboard is specifically designed to display a historical graph of bandwidth usage (ingress and egress) over selectable time ranges including the last 24 hours. It samples interface throughput counters and renders them as a time-series chart, making it the correct answer for viewing historical traffic trends. This widget is available on the default dashboard and can be customized per admin.

Answer

FortiView Summary

Answer

System > Performance Graphs

Answer

Log & Report > Traffic Graph

Question 14

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

Accepted Answer

execute telnet [server-IP] [port]. The FortiGate CLI command 'execute telnet [server-IP] [port]' initiates a TCP connection to the specified IP and port, allowing the administrator to test whether that TCP port is reachable and open. If the connection succeeds, the port is open; if it fails or times out, the port is blocked or the service is down. This is the standard CLI method for TCP port testing on FortiGate.

Answer

diagnose tcp-test [server-IP] [port]

Answer

ping -p [port] [server-IP]

Answer

traceroute -port [port] [server-IP]

Question 15

An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?

Accepted Answer

Dashboard > System Information widget (System Mode field). The operational mode (NAT vs. Transparent) is displayed in the Dashboard > System Information widget under the System Mode field. The System Information widget on the default dashboard shows key device details including hostname, firmware version, serial number, and the current system mode, making it the correct place to verify whether the FortiGate is in NAT or Transparent mode.

Answer

System > Feature Visibility > NAT Mode

Answer

Network > Operation Mode

Answer

Policy & Objects > Mode Settings