FortiGate CLI command. FortiOS offers subcommands such as scp, ftp, tftp, and usb under 'execute backup config', but 'copy' is not one of the supported options. Attempting to use it will result in a syntax error and the configuration will not be backed up. The word 'copy' might be familiar from other systems, but it has no meaning in this FortiOS context.","masteryContext":""},{"key":"B","isCorrect":true,"text":"execute backup config scp ","explanation":"The command 'execute backup config scp ' is the correct, secure method to back up a FortiGate configuration. SCP (Secure Copy Protocol) runs over SSH, encrypting the entire transfer session, which protects the configuration file and any server credentials from interception. Because the configuration contains sensitive data such as VPN preshared keys, passwords, and certificates, using SCP is strongly recommended, especially when backing up over an untrusted network. The parameter can include a username in user@host format for SSH authentication.","masteryContext":""},{"key":"C","isCorrect":false,"text":"execute backup config tftp ","explanation":"The command 'execute backup config tftp ' is syntactically valid on FortiGate, but TFTP (Trivial File Transfer Protocol) transmits all data in plaintext with no authentication or encryption. An attacker on the network could capture the configuration file, which often holds confidential settings like hashed passwords and network addresses. TFTP is also a simple UDP-based protocol with no flow control or security, making it unreliable for large files and entirely unsuitable for secure backups. Therefore, this command is wrong when a secure backup method is required.","masteryContext":""},{"key":"D","isCorrect":false,"text":"execute backup config ftp ","explanation":"The command 'execute backup config ftp ' is a valid FortiGate command, but FTP (File Transfer Protocol) is inherently insecure because both the control channel and the data channel are sent in cleartext. In addition to exposing the configuration file itself, FTP login credentials (username and password) can be sniffed easily. Unlike SCP, which leverages SSH encryption, FTP provides no confidentiality or integrity protection. While FTP does have authentication, unlike TFTP, it lacks encryption, making this option incorrect for secure backup operations.","masteryContext":""}],"correctOptionKey":"B","correctOptions":["B"],"correctAnswerText":"","isMultiSelect":false,"mainExplanation":"The correct command is 'execute backup config scp ' because SCP (Secure Copy Protocol) is the only option listed that provides encrypted file transfer over SSH, which is required for securely backing up the FortiGate configuration to a remote server. FortiGate uses this CLI command to initiate an SCP session to the specified server and save the configuration file with the given filename.","examTrap":"The trap here is that candidates often confuse 'scp' with 'ftp' or 'tftp' because they all transfer files, but only SCP provides encryption, which is the key requirement for a secure remote backup.","examTip":null,"technicalDeepDive":"$61","keyConcepts":[],"faqs":[],"eliminationLogic":null,"exhibitText":null,"exhibitUrl":null,"hasExhibit":false,"isExhibitQuestion":false,"questionPairs":null,"hasMatchingPairs":false,"isMatchingQuestion":false,"relatedQuestions":[],"breadcrumbItems":null,"nextQuestionUrl":null,"previousQuestionUrl":null,"domainPracticeUrl":null,"certificationUrl":null,"domainUrl":null,"hasAnswerOptions":true,"updatedAt":"2026-06-24T19:45:51.985+00:00","questionType":"multiple_choice"},{"id":"548828be-fca0-4241-b770-07ac40844bdd","slug":"an-administrator-plans-to-upgrade-fortigate-firmware-from-ve-e7qqu","certificationSlug":"fortinet-nse4","examCode":"NSE4","examName":"Fortinet NSE 4 Network Security Professional NSE4","questionText":"An administrator plans to upgrade FortiGate firmware from version 6.0 to 7.2. The current version is 6.0.10.