Courseiva

FORTINET-NSE123 · domain

Nse 3 Fortigate Operational Fundamentals

This domain covers day-to-day operation of a FortiGate in the web-based manager: dashboard widgets and customization, checking whether the device runs in NAT or Transparent mode, reading traffic and bandwidth graphs, and following where logs actually go. Questions are scenario-based, asking which widget, menu, or setting an administrator uses to accomplish a specific operational task.

69 questions22 easy26 medium21 hard

Focused practice

Practice Nse 3 Fortigate Operational Fundamentals questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Nse 3 Fortigate Operational Fundamentals

Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.

Customizing dashboard widgets and adding or removing monitors in the FortiGate GUI

Locating the System Information widget to confirm NAT versus Transparent operating mode

Using the Bandwidth widget or interface graphs for historical traffic over time

Tracing logged traffic through Log & Report and verifying log settings and destinations

Watch out for

Common Nse 3 Fortigate Operational Fundamentals exam traps

  • ▸Assuming a policy's log setting guarantees visible logs, ignoring whether logging is enabled globally and where logs are stored or sent
  • ▸Confusing NAT and Transparent mode indicators, or looking for the mode under network interface settings instead of the dashboard System Information widget
  • ▸Expecting the dashboard to show historical bandwidth by default, when many widgets must be added or configured first

Question index

All Nse 3 Fortigate Operational Fundamentals questions (69)

Click any question to see the full explanation, or start a practice session above.

1

A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?

Medium
2

An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)

Medium
3

An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?

Medium
4

An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?

Easy
5

Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?

Easy
6

An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?

Medium
7

Which TWO dashboard widgets are commonly used to monitor system performance and health on a FortiGate?

Easy
8

An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?

Easy
9

An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?

Hard
10

When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?

Medium
11

An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?

Easy
12

An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?

Medium
13

An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)

Medium
14

An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)

Medium
15

Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?

Easy
16

An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?

Hard
17

An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?

Medium
18

Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?

Easy
19

An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)

Hard
20

Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?

Easy
21

An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)

Medium
22

An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?

Easy
23

An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?

Hard
24

An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?

Easy
25

An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?

Hard
26

An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?

Medium
27

An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)

Medium
28

An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)

Hard
29

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Hard
30

An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?

Hard
31

An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)

Hard
32

An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?

Hard
33

An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?

Hard
34

An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?

Medium
35

An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?

Medium
36

An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?

Medium
37

A network administrator is troubleshooting an intermittent connectivity issue on a FortiGate 100F running FortiOS 7.2. They suspect that the problem is related to the session table filling up. Which CLI command should they use to view the current session count and the maximum session limit?

Medium
38

How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?

Easy
39

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Medium
40

An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?

Hard
41

Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?

Easy
42

An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?

Easy
43

An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?

Hard
44

An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?

Easy
45

An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?

Hard
46

An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?

Medium
47

An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?

Easy
48

An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?

Hard
49

An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)

Medium
50

An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?

Hard
51

An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?

Medium
52

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

Easy
53

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

Hard
54

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

Medium
55

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

Hard
56

An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?

Hard
57

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

Easy
58

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

Easy
59

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

Medium
60

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

Easy
61

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

Medium
62

When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?

Medium
63

Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?

Easy
64

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

Hard
65

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

Medium
66

An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)

Medium
67

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

Easy
68

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

Easy
69

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

Hard

Frequently asked questions

What does the Nse 3 Fortigate Operational Fundamentals domain cover on the FORTINET-NSE123 exam?
Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.
How many questions are in this domain?
This page lists all 69 Nse 3 Fortigate Operational Fundamentals questions in the FORTINET-NSE123 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Nse 3 Fortigate Operational Fundamentals questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Fortinet NSE 1-3 (Network Security Associate track: Foundational, Technical Introduction, Associate) (FORTINET-NSE123) Nse 3 Fortigate Operational Fundamentals Practice Questions