FORTINET-NSE123 · domain
Nse 3 Fortigate Operational Fundamentals
This domain covers day-to-day operation of a FortiGate in the web-based manager: dashboard widgets and customization, checking whether the device runs in NAT or Transparent mode, reading traffic and bandwidth graphs, and following where logs actually go. Questions are scenario-based, asking which widget, menu, or setting an administrator uses to accomplish a specific operational task.
Focused practice
Practice Nse 3 Fortigate Operational Fundamentals questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Nse 3 Fortigate Operational Fundamentals
Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.
Customizing dashboard widgets and adding or removing monitors in the FortiGate GUI
Locating the System Information widget to confirm NAT versus Transparent operating mode
Using the Bandwidth widget or interface graphs for historical traffic over time
Tracing logged traffic through Log & Report and verifying log settings and destinations
Watch out for
Common Nse 3 Fortigate Operational Fundamentals exam traps
- ▸Assuming a policy's log setting guarantees visible logs, ignoring whether logging is enabled globally and where logs are stored or sent
- ▸Confusing NAT and Transparent mode indicators, or looking for the mode under network interface settings instead of the dashboard System Information widget
- ▸Expecting the dashboard to show historical bandwidth by default, when many widgets must be added or configured first
Question index
All Nse 3 Fortigate Operational Fundamentals questions (69)
Click any question to see the full explanation, or start a practice session above.
A junior administrator accidentally locked themselves out of the FortiGate CLI after multiple incorrect password attempts. What is the standard administrative method to recover access without losing the configuration?
Medium2An administrator needs to configure local administrator accounts with specific operational privileges. Which TWO elements are required or configurable when creating a new local administrator account? (Choose two)
Medium3An administrator is troubleshooting intermittent latency on a specific interface. They need to capture live packet data passing through that interface directly from the FortiGate CLI. Which command is used for packet capture?
Medium4An administrator needs to verify the current firmware version running on the FortiGate. Where can this information be found immediately upon logging into the dashboard?
Easy5Where can an administrator view a summary of detected security threats, such as blocked malware and intrusion prevention events, in the FortiGate web-based manager?
Easy6An administrator needs to check the status of FortiCare registration and feature licenses. Where in the web-based manager is this license summary displayed?
Medium7Which TWO dashboard widgets are commonly used to monitor system performance and health on a FortiGate?
Easy8An administrator needs to quickly check the CPU and memory utilization of a FortiGate device directly from the web-based manager. Which dashboard widget provides this real-time system performance information by default?
Easy9An administrator suspects that a session is stuck in the FortiGate session table, preventing new connections. Which command allows viewing active sessions matching a specific source IP?
Hard10When setting up a new FortiGate device, an administrator needs to configure basic network parameters before deploying it in production. Which THREE parameters must be configured for basic network connectivity?
Medium11An administrator wants to verify the amount of free space available on the system log disk. Which dashboard widget displays this metric?
Easy12An administrator wants to verify the administrator access profile privileges assigned to a specific admin account. Where can access profiles be defined and edited?
Medium13An administrator wants to verify high availability (HA) cluster status and member synchronization. Which TWO commands or dashboard widgets provide this HA status? (Choose two)
Medium14An administrator wants to view historical web filtering and traffic logs on the FortiGate. Which TWO methods can be used to search and analyze stored logs? (Choose two)
Medium15Which dashboard widget displays the status of connected FortiGate security fabric devices and fabric topology?
Easy16An administrator is troubleshooting a certificate validation error when users connect to an SSL VPN portal. Where can the active SSL VPN server certificate be verified or changed in the web-based manager?
Hard17An administrator needs to export the current configuration of a FortiGate to a secure local file for backup purposes. Which menu path should the administrator navigate in the web-based manager?
Medium18Where can an administrator view real-time bandwidth consumption per interface on the FortiGate dashboard?
Easy19An administrator is reviewing log storage and management settings on the FortiGate. Which THREE storage options or destinations are supported for logging on a FortiGate? (Choose three)
Hard20Where can an administrator view a real-time list of top destination IP addresses accessed by internal users?
Easy21An administrator is preparing to deploy a new FortiGate and needs to configure basic network parameters. Which TWO basic network settings must typically be configured on physical interfaces before deploying firewall policies? (Choose two)
Medium22An administrator wants to view top talkers by bandwidth usage over the past hour. Which FortiView view should be accessed?
Easy23An administrator needs to restore a saved configuration file to the FortiGate via the CLI. Which command is used to restore configuration settings from a backup file stored on a TFTP server?
Hard24An administrator needs to view active hardware temperature and power supply statuses on the dashboard. Which widget should be added?
Easy25An administrator is troubleshooting log delivery failures to a remote syslog server. Which TWO troubleshooting commands or tools can be used from the FortiGate CLI to verify connectivity and log transmission?
Hard26An administrator needs to verify the current date and time settings on the FortiGate to ensure log timestamps are accurate. Which menu path in the web-based manager is used to configure system time and NTP settings?
Medium27An administrator needs to back up the FortiGate configuration and ensure that sensitive passwords are protected. Which TWO statements regarding FortiGate configuration backups are correct? (Choose two)
Medium28An administrator is investigating a network performance degradation issue and needs to check hardware sensor health on a high-end FortiGate unit. Which THREE hardware parameters or components can be monitored via FortiGate hardware status commands or widgets? (Choose three)
Hard29An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?
Hard30An administrator is troubleshooting a DHCP server issue on the FortiGate and needs to see active IP address leases assigned by the built-in DHCP server. Which CLI command provides this information?
Hard31An administrator is examining the FortiGate routing table via the CLI. Which THREE types of routes can appear in the active routing table? (Choose three)
Hard32An administrator is reviewing firewall policies and notices that traffic matching a specific policy is being logged, but no traffic logs are appearing in Log & Report > Forward Traffic. FortiGate is configured to send logs to FortiAnalyzer. Where are the traffic logs being stored?
Hard33An administrator is troubleshooting a packet loss issue and needs to inspect the kernel buffer drops and interface error counters. Which CLI command provides a summary of interface drop statistics?
Hard34An administrator wants to verify whether the FortiGate device is operating in NAT mode or Transparent mode. Where can this operational mode be checked in the web-based manager?
Medium35An administrator needs to modify the hostname of the FortiGate via the CLI. Which configuration context and command are used?
Medium36An administrator wants to check the operational status of all physical and logical interfaces in a summary table view. Which menu path in the web-based manager should be opened?
Medium37A network administrator is troubleshooting an intermittent connectivity issue on a FortiGate 100F running FortiOS 7.2. They suspect that the problem is related to the session table filling up. Which CLI command should they use to view the current session count and the maximum session limit?
Medium38How can an administrator quickly verify whether the FortiGate unit has a valid and active FortiCare support contract from the GUI?
Easy39An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?
Medium40An administrator is troubleshooting high memory utilization on a FortiGate. They run 'get system performance status' and see that memory usage is in conserve mode. What immediate action does FortiOS take when entering conserve mode?
Hard41Where in the FortiGate web-based manager can an administrator view current system alerts, warning logs, and administrative event logs?
Easy42An administrator wants to view active VPN tunnels and connected remote users on the dashboard. Which widget is designed for this purpose?
Easy43An administrator needs to troubleshoot a routing issue and verify which route will be selected by the FortiGate for a specific destination IP. Which CLI command allows routing lookup simulation?
Hard44An administrator wants to see a real-time list of top applications generating traffic on the network. Which FortiView tab should be opened?
Easy45An administrator needs to test reachability and path MTU to a destination IP using ICMP packets with the Don't Fragment (DF) bit set. Which CLI command allows this?
Hard46An administrator needs to set up log forwarding from the FortiGate to a remote Syslog server. Which menu path in the web-based manager is used to configure remote logging?
Medium47An administrator wants to check the operational status of FortiGate HA clustering. Which dashboard widget provides an overview of HA member health and role status?
Easy48An administrator wants to secure administrative access to the FortiGate. Which THREE best practices should be implemented?
Hard49An administrator wants to customize the dashboard view on the FortiGate web-based manager. Which TWO actions can the administrator perform to personalize the dashboard? (Choose two)
Medium50An administrator needs to verify the status of certificate inspection and CA certificates installed on the FortiGate. Where are SSL/SSH inspection profiles and local certificates managed in the web-based manager?
Hard51An administrator needs to back up the current FortiGate configuration securely to a local PC via the GUI. Which option should the administrator select?
Medium52An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?
Easy53An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?
Hard54An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?
Medium55An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?
Hard56An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?
Hard57An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?
Easy58An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?
Easy59An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)
Medium60Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?
Easy61An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?
Medium62When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?
Medium63Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?
Easy64An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?
Hard65An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?
Medium66An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)
Medium67An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?
Easy68An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?
Easy69An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?
HardOther domains
All FORTINET-NSE123 exam domains
Frequently asked questions
- What does the Nse 3 Fortigate Operational Fundamentals domain cover on the FORTINET-NSE123 exam?
- Be able to navigate the FortiGate GUI to customize the dashboard, confirm the operating mode, read bandwidth and traffic graphs, and locate logs. The key skill is knowing which widget, menu, or log setting answers a given operational question.
- How many questions are in this domain?
- This page lists all 69 Nse 3 Fortigate Operational Fundamentals questions in the FORTINET-NSE123 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Nse 3 Fortigate Operational Fundamentals questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.