Nse 3 Fortigate Operational Fundamentals

A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?

An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?

An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?

An administrator needs to verify whether the FortiGate unit can successfully communicate with the FortiGuard distribution servers for license and signature updates. Which command should be run in the CLI to test this specific connectivity?

Which TWO dashboard widgets are commonly used to monitor system performance and health on a FortiGate?

An administrator wants to search for a specific user's web browsing logs from earlier in the day. Which menu should they open in the web-based manager?

An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?

An administrator needs to verify the hardware sensor status (fans, power supplies, temperatures) of a high-end FortiGate unit. Which command provides this hardware health status?

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

An administrator is troubleshooting a policy match issue and needs to inspect a specific security policy's hit count and ID directly from the CLI. Which CLI command should the administrator use to list all firewall policies with their internal IDs and rule details?

When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?

An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?

An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?

An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)

Where can an administrator view a summary of system alerts and warning messages directly in the web-based manager without navigating to full log reports?

An administrator needs to configure an idle timeout for administrative web GUI sessions to enhance security. Where is this setting located?

An administrator notices that the FortiGate configuration changes made during troubleshooting were lost after an unexpected power outage. Where should the administrator check to ensure that the current running configuration is permanently saved?

An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?

An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?

An administrator wants to check the connection status of Security Fabric telemetry between the root FortiGate and downstream devices. Where is the Security Fabric status viewed?

An administrator notices that configuration changes made via the CLI are not persisting after a device reboot. What is the most likely reason for this behavior?

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

An administrator needs to configure SNMP v3 monitoring on the FortiGate for integration with a network management system (NMS). Where is SNMP configured in the web-based manager?

An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)

Where in the FortiGate GUI can an administrator view a summary of detected security incidents, top applications, and top bandwidth users across the network?

Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?

An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)

An administrator wants to verify which administrator is currently logged into the FortiGate and from which IP address. Which CLI command should be used?

An administrator wants to check the operational status and firmware version of all connected FortiExtender devices managed by the FortiGate. Which menu path should they follow?

An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?

An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?

An administrator wants to customize the dashboard view by adding a new widget. What is the standard method to add widgets in the FortiGate GUI?

An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?

An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?

An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?

An administrator is troubleshooting a configuration synchronization failure in an HA cluster. Which CLI command forces an immediate configuration synchronization from the primary unit to the secondary unit?

An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)

An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

An administrator wants to verify which configuration revision history is currently active and wants to roll back to a previous revision. Where can configuration revisions be managed in the web-based manager?

An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?

An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)

An administrator needs to verify whether FortiGuard web filtering rating lookups are succeeding for specific categories. Which CLI command tests web filter rating lookups for a specific URL?

An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?

An administrator is reviewing the configuration options available under System > Admin Settings in the FortiGate GUI. Which TWO settings can be configured in this menu?

An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?

An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?

An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?

An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?

An administrator needs to modify the TCP session timeout for specific services. Where are global system timeout values configured in the CLI?

How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?

An administrator is troubleshooting a routing and connectivity issue on the FortiGate. Which THREE CLI commands can be used to test network reachability and path characteristics? (Choose three)

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

An administrator needs to check the status of static routes configured on the FortiGate. Which CLI command lists all static routes?

An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?

An administrator wants to inspect historical logs stored locally on the FortiGate hard drive. Which menu should they open?

An administrator needs to check system performance and resource bottlenecks on a FortiGate device using the CLI. Which TWO commands can be used to display CPU, memory, and process-level utilization? (Choose two)

Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?

An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?

An administrator is configuring a new firewall policy to allow internal users to access the internet. Which parameter is mandatory when defining a IPv4 firewall policy in FortiOS?

An administrator suspects memory fragmentation or a memory leak in a specific daemon (e.g., wad). Which CLI command provides detailed memory allocation statistics per daemon?

An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?

An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?

An administrator suspects a routing loop or gateway failure and needs to test basic IP connectivity to the default gateway with a specified source IP. Which CLI command allows specifying the source IP for a ping test?

An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?

An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?

An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?

An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?

An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)

An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?

An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?

An administrator is troubleshooting a DHCP service running on a FortiGate interface. Which THREE commands or tools can be used to verify DHCP status and leases? (Choose three)

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?

An administrator needs to verify whether a specific security profile (such as an Antivirus or Web Filter profile) is currently referenced by any firewall policy. Which CLI command helps trace object dependencies?

A network administrator is troubleshooting traffic passing through a FortiGate using the CLI command 'diagnose debug flow'. Before capturing traffic, what command must be executed to ensure the debug output appears in the current CLI session?

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

An administrator is troubleshooting a packet flow issue and needs to capture live traffic on the FortiGate CLI. Which THREE parameters or options must be specified when configuring the diagnose sniffer packet command? (Choose three)

An administrator needs to verify whether a specific security profile (e.g., Antivirus) is actively inspecting traffic matching a firewall policy. Which CLI command displays the detailed runtime statistics and counter hits for security profiles bound to a policy ID?

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?

An administrator wants to flush all current entries from the FortiGate session table to resolve a stubborn state synchronization issue. Which CLI command achieves this?

An administrator needs to verify the license status and serial number of a managed FortiSwitch connected to the FortiGate. Where can managed switches be viewed in the web-based manager?

Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)

An administrator needs to verify DNS and time synchronization settings to ensure accurate log timestamps and FortiGuard connectivity. Which THREE settings or commands should be verified? (Choose three)

An administrator is troubleshooting a FortiGate device where traffic passing through a specific firewall policy is failing. Which TWO dashboard widgets or monitoring views should the administrator inspect to verify live traffic status and policy hits? (Choose two)

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

An administrator needs to verify the status of hardware acceleration (NP processors) and check whether traffic is offloaded to the NP chips. Which CLI command displays NP processor status and offloaded session counters?

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?