Courseiva

CCNA Nse 3 Fortigate Operational Fundamentals Questions

28 of 103 questions · Page 2/2 · Nse 3 Fortigate Operational Fundamentals · Answers revealed

76
Multi-Selecthard

An administrator is troubleshooting a DHCP service running on a FortiGate interface. Which THREE commands or tools can be used to verify DHCP status and leases? (Choose three)

Select 3 answers
A.FortiView > DHCP Sessions
B.execute dhcp lease-list
C.Checking interface IP and DHCP service binding in Network > Interfaces GUI menu
D.show system dhcp-server (in CLI configuration mode)
E.diagnose firewall dhcp-drop list
AnswersB, C, D

Correct. This command lists active IP address leases assigned by the FortiGate DHCP server.

Why this answer

DHCP status and leases can be verified using execute dhcp lease-list, checking system DHCP configuration via show system dhcp-server, and viewing interface settings.

77
MCQeasy

An administrator needs to view a graphical representation of bandwidth usage over the last 24 hours. Which dashboard widget provides this historical traffic graph?

A.FortiView Summary
B.Bandwidth widget
C.System > Performance Graphs
D.Log & Report > Traffic Graph
AnswerB

Correct. The Bandwidth widget displays historical throughput trends.

Why this answer

The Bandwidth widget or Network Interfaces historical graph displays traffic trends over time.

78
MCQhard

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

A.execute traceroute
B.get system interface
C.get router info routing-table all
D.diagnose firewall IP-antibot list
AnswerC

Correct. This command outputs the complete active routing table.

Why this answer

The command get router info routing-table all displays the active routing table known to the FortiGate routing daemon.

79
MCQmedium

An administrator needs to change the management IP address of the internal interface (e.g., port1) via the CLI. Which sequence of configuration commands is correct?

A.config router interface > edit port1 > set address [IP] > end
B.config system interface > edit port1 > set ip [IP] [netmask] > end
C.set interface port1 ip [IP] > save
D.execute set ip port1 [IP]
AnswerB

Correct. This sequence navigates to the interface context, modifies the IP address, and saves the changes.

Why this answer

Configuring interface IP addresses requires entering the system interface config context, editing the specific interface, and setting the ip parameter.

80
MCQhard

An administrator wants to check the status of HA (High Availability) synchronization between primary and secondary FortiGate units. Which CLI command should be used?

A.diagnose ha group list
B.show HA cluster
C.get system status HA
D.get system ha status
AnswerD

Correct. This command displays cluster members, heartbeats, and synchronization states.

Why this answer

The get system ha status command provides detailed statistics and synchronization state for high availability clusters.

81
MCQhard

An administrator needs to review the exact CLI commands executed during a troubleshooting session or audit log history. Which log category records administrative CLI command execution?

A.Security Fabric > Audit Logs
B.FortiView > Command History
C.Log & Report > System Events (Admin Login and CLI Command Logs)
D.Log & Report > CLI History
AnswerC

Correct. System event logs record administrator logins and executed CLI commands.

Why this answer

Event logs record administrative CLI command execution when command auditing is enabled.

82
MCQhard

An administrator needs to verify whether a specific security profile (such as an Antivirus or Web Filter profile) is currently referenced by any firewall policy. Which CLI command helps trace object dependencies?

A.execute check-profile [profile-name]
B.diagnose firewall policy reference
C.get system object-usage [object-name] or checking object references in CLI configuration context
D.show firewall policy dependency
AnswerC

Correct. FortiOS allows checking object references and dependencies to see where profiles are used.

Why this answer

The check-usage command in config mode helps verify object dependencies before deletion.

83
MCQmedium

A network administrator is troubleshooting traffic passing through a FortiGate using the CLI command 'diagnose debug flow'. Before capturing traffic, what command must be executed to ensure the debug output appears in the current CLI session?

A.diag debug console timestamp enable
B.execute debug reset
C.diag debug enable
D.diag debug enable
AnswerD

Correct. You must execute 'diag debug enable' after setting filters to see the output.

Why this answer

By default, debugging output is silenced in the console. The administrator must enable console debugging using 'diag debug enable'.

84
MCQeasy

An administrator needs to monitor real-time CPU and memory usage from the FortiGate GUI dashboard. Which widget should be added to the dashboard for this purpose?

A.FortiView Sessions
B.System Resources
C.Log Rate
D.License Information
AnswerB

Displays real-time graphs of CPU, memory, and session usage.

Why this answer

The System Resources widget provides real-time graphs and metrics for CPU, memory, and disk utilization on the FortiGate dashboard.

85
MCQeasy

An administrator wants to view real-time CPU utilization per system process. Which dashboard widget or view helps identify which process is consuming CPU resources?

A.Monitor > Performance Log
B.FortiView > Processes
C.System Resources widget (Process list)
D.Log & Report > CPU Logs
AnswerC

Correct. The System Resources widget allows viewing process details and CPU consumption.

Why this answer

The System Resources widget provides a link or view to examine process-level CPU consumption, or the diagnose sys top command can be used in CLI.

86
Multi-Selectmedium

An administrator wants to ensure that administrative access to the FortiGate web-based manager is secure. Which TWO configuration steps should be implemented? (Choose two)

Select 2 answers
A.Enable Telnet for administrative CLI access.
B.Configure Trusted Hosts on the administrator account to restrict management login to specific IP addresses.
C.Use default admin accounts with blank passwords.
D.Disable password complexity requirements globally.
E.Disable HTTP administrative access and enforce HTTPS only.
AnswersB, E

Correct. Trusted hosts restrict admin login capability to designated administrative IP subnets.

Why this answer

Securing administrative access involves restricting trusted hosts and enforcing HTTPS/SSH with strong passwords.

87
Multi-Selecthard

An administrator is troubleshooting a packet flow issue and needs to capture live traffic on the FortiGate CLI. Which THREE parameters or options must be specified when configuring the diagnose sniffer packet command? (Choose three)

Select 3 answers
A.Packet count or matching filter expression (e.g., 'host 10.0.0.1')
B.Verbosity level (e.g., 4 or 6)
C.Destination printer IP address
D.Administrator GUI session timeout
E.Interface name (e.g., any or port1)
AnswersA, B, E

Correct. Filters and packet count limits can be applied to narrow down captured traffic.

Why this answer

The diagnose sniffer packet command requires an interface name, a verbose level, and optionally a filter expression.

88
MCQhard

An administrator needs to verify whether a specific security profile (e.g., Antivirus) is actively inspecting traffic matching a firewall policy. Which CLI command displays the detailed runtime statistics and counter hits for security profiles bound to a policy ID?

A.get firewall policy <policy-id>
B.diagnose sys session list
C.diagnose firewall pauth list
D.get system status
AnswerA

Displays detailed policy configurations and counters, including integrated security profile hits.

Why this answer

To view hit counts and operational details of firewall policies including security profile counters, administrators use 'get firewall policy <ID>'.

89
MCQeasy

Which dashboard widget displays the current status and capacity of local storage (hard drive or log disk) on the FortiGate?

A.System Resources
B.Log Disk
C.Storage Manager
D.Hardware Status
AnswerB

Correct. The Log Disk widget shows disk space utilization and health.

Why this answer

The Log Disk widget displays usage and status of the local hard disk or log disk.

90
MCQmedium

An administrator is configuring a new local administrator account with restricted privileges. Where in the web-based manager are administrator accounts and access profiles created and managed?

A.Policy & Objects > Admins
B.Security Fabric > Access Control
C.User & Authentication > Administrator Users
D.System > Administrators
AnswerD

Correct. Administrator accounts, profiles, and authentication settings are configured here.

Why this answer

Administrator accounts and profiles are managed under System > Administrators.

91
Multi-Selectmedium

When navigating the FortiGate GUI, which THREE main functional areas or menu categories are typically visible in the standard menu tree?

Select 3 answers
A.Dashboard
B.Kernel Debugger
C.Policy & Objects
D.Log & Report
E.BIOS Utility
AnswersA, C, D

Provides widgets for device health and monitoring summaries.

Why this answer

Standard FortiOS menu categories include Dashboard, Security Fabric, Policy & Objects, FortiView, and Log & Report.

92
MCQhard

An administrator wants to flush all current entries from the FortiGate session table to resolve a stubborn state synchronization issue. Which CLI command achieves this?

A.flush session table
B.diagnose sys session clear
C.config system session flush
D.execute clear system session
AnswerD

Correct. This command clears all active sessions from the FortiGate session table.

Why this answer

The execute clear system session command flushes active sessions from the session table.

93
MCQmedium

An administrator needs to verify the license status and serial number of a managed FortiSwitch connected to the FortiGate. Where can managed switches be viewed in the web-based manager?

A.Network > Switch Controller
B.WiFi & Switch Controller > Managed FortiSwitches
C.System > FortiSwitch
D.Security Fabric > FortiSwitch
AnswerB

Correct. FortiSwitch units connected to the FortiGate are managed and monitored under the Switch Controller menu.

Why this answer

Managed switches are managed and viewed under WiFi & Switch Controller (or Managed Devices depending on FortiOS version).

94
MCQeasy

Which dashboard widget displays the overall hardware status, serial number, firmware version, and system uptime of the FortiGate?

A.License Information
B.System Information
C.Network Interface Monitor
D.CLI Console
AnswerB

Shows core device details like serial number, firmware, uptime, and hostname.

Why this answer

The System Information widget on the dashboard displays basic device vitals including hostname, firmware version, serial number, and uptime.

95
MCQhard

An administrator needs to test whether a specific TCP port is open on a remote server directly from the FortiGate CLI. Which command can be used to test TCP connectivity?

A.diagnose tcp-test [server-IP] [port]
B.ping -p [port] [server-IP]
C.traceroute -port [port] [server-IP]
D.execute telnet [server-IP] [port]
AnswerD

Correct. execute telnet allows testing TCP port connectivity from the FortiGate.

Why this answer

The execute telnet or nc (netcat) tools are not standard, but execute telnet [IP] [port] or specific diagnostic tools can test TCP ports. Alternatively, execute ping is for ICMP. In FortiOS, execute telnet is available on some models, but more reliably, diagnose sniffer or specialized commands test ports.

Wait, execute telnet exists on FortiOS. Let's use execute telnet.

96
MCQmedium

An administrator wants to verify the operational status and packet error rates of a specific physical interface (e.g., port2) via CLI. Which command should be used?

A.get system interface physical [interface-name] or diagnostics hardware deviceinfo nic [interface-name]
B.show interface port2 stats
C.get system interface port2
D.execute interface check port2
AnswerA

Correct. Diagnostic and get commands display hardware counters, drops, and error rates for NICs.

Why this answer

The get system interface physical or get system interface transceiver commands display detailed interface statistics and error counters.

97
Multi-Selectmedium

An administrator needs to perform a firmware upgrade on a standalone FortiGate. Which TWO best practices should be followed before initiating the upgrade? (Choose two)

Select 2 answers
A.Back up the current FortiGate configuration file.
B.Perform a factory reset immediately after upgrading without saving configurations.
C.Review the official FortiOS release notes and verified upgrade paths.
D.Unplug all physical network interfaces during the upgrade.
E.Downgrade the FortiGuard license contract.
AnswersA, C

Correct. Always back up the configuration before any firmware upgrade to allow rollback if necessary.

Why this answer

Before upgrading firmware, administrators should back up the configuration and review the release notes for upgrade paths and known issues.

98
Multi-Selecthard

An administrator needs to verify DNS and time synchronization settings to ensure accurate log timestamps and FortiGuard connectivity. Which THREE settings or commands should be verified? (Choose three)

Select 3 answers
A.Firewall policy packet hit counters
B.System timezone configuration
C.NTP server synchronization status and time configuration (get system status or system settings)
D.Configured DNS server IP addresses (get system dns)
E.Hardware switch port duplex modes
AnswersB, C, D

Correct. Timezone settings ensure log timestamps match local operational hours.

Why this answer

DNS servers, NTP server synchronization, and system time/timezone settings are crucial for log timestamps and FortiGuard updates.

99
Multi-Selectmedium

An administrator is troubleshooting a FortiGate device where traffic passing through a specific firewall policy is failing. Which TWO dashboard widgets or monitoring views should the administrator inspect to verify live traffic status and policy hits? (Choose two)

Select 2 answers
A.Network > Interfaces widget
B.Security Fabric > Audit
C.System > FortiGuard Status
D.FortiView > Policies
E.Policy & Objects > Firewall Policy (Hit Count column)
AnswersD, E

Correct. FortiView Policies displays real-time traffic statistics mapped to firewall policies.

Why this answer

Live traffic and policy matches can be reviewed via FortiView Policies and the firewall policy hit count column under Policy & Objects.

100
MCQeasy

An administrator wants to view a chronological list of all administrator logins, configuration changes, and system alerts. Which log category contains this information?

A.Log & Report > Forward Traffic
B.Dashboard > Event Summary
C.Log & Report > System Events
D.FortiView > Admins
AnswerC

Correct. System Events logs administrative logins, configuration edits, and system alerts.

Why this answer

Event logs record administrative actions, system events, and operational warnings.

101
MCQhard

An administrator needs to verify the status of hardware acceleration (NP processors) and check whether traffic is offloaded to the NP chips. Which CLI command displays NP processor status and offloaded session counters?

A.get hardware npu np6 or diagnose npu [processor] stats
B.get system npu-status
C.show firewall hardware-acceleration
D.execute npu-test
AnswerA

Correct. Diagnostic and get hardware NPU commands show hardware offloading status and traffic counters.

Why this answer

The diagnose npu np6 port-list or get hardware npu commands display NP processor status and statistics.

102
MCQeasy

An administrator wants to view top bandwidth-consuming applications on the FortiGate dashboard. Which feature or view provides this aggregated application visibility?

A.FortiView > Applications
B.Log & Report > Forward Traffic
C.Security Fabric > Topology
D.System > FortiGuard
AnswerA

Correct. FortiView provides visual dashboards for top applications, bandwidth usage, and user activity.

Why this answer

FortiView is the primary monitoring and visualization tool on FortiGate for tracking top applications, sources, destinations, and threats.

103
MCQhard

An administrator suspects that a specific firewall policy rule is dropping legitimate traffic due to an incorrect security profile or action. Where can the administrator check the hit counters for each individual firewall policy in the web-based manager?

A.FortiView > Policies view
B.System > Feature Visibility > Policy Statistics
C.Policy & Objects > Firewall Policy view, by checking the 'Hit Count' column
D.Log & Report > Traffic Log Summary
AnswerC

Correct. The hit count column in the Firewall Policy list displays how many times traffic has matched each rule.

Why this answer

Firewall policy hit counters are visible directly in the Policy & Objects > Firewall Policy view when the column is enabled.

← PreviousPage 2 of 2 · 103 questions total

Ready to test yourself?

Try a timed practice session using only Nse 3 Fortigate Operational Fundamentals questions.