NSE4 System and Network Administration Practice Question
Which of the following statements about FortiGate backup is true?
⚠ Common exam trap
It's easy for candidates to assume backups include all runtime data like sessions and logs, or that backups are model-specific, but FortiGate explicitly separates configuration from volatile state data, and restoration is firmware-version dependent, not hardware-model dependent.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The backup file contains the full configuration and can be encrypted with a password
FortiGate backup files contain the full device configuration, including all settings and policies, and can be encrypted with a password using the 'execute backup config' command with the 'password' option. This ensures confidentiality during storage or transfer, as the backup is stored in a binary format that requires the password for decryption during restoration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The backup includes all current sessions and logs
Why it's wrong here
A FortiGate configuration backup captures only the static running configuration—such as policies, objects, and system settings—not transient operational data. Active sessions live in the session table and are inherently lost on reboot or restore. Logs are stored separately on the local disk or external log servers and are never included in a configuration backup; to preserve logs you would need a separate log backup or archiving process.
- ✓
The backup file contains the full configuration and can be encrypted with a password
Why this is correct
The FortiGate backup file is a single archive that contains the complete device configuration, including all firewall policies, address objects, VPN settings, and system parameters. During the backup process, you have the option to encrypt the file with a password, which is then required to restore it. This encryption ensures that even if the backup file is intercepted, the configuration data remains confidential and cannot be read without the password.
- ✗
A backup can be restored only on the same hardware model
Why it's wrong here
FortiGate configuration backups are not strictly hardware-model locked; they can generally be restored to any FortiGate model that runs a compatible FortiOS version and has the necessary resources. However, you may need to manually adjust settings if the target device has fewer interfaces, different port names, or does not support certain features. The same backup can also be used for disaster recovery on dissimilar hardware, as long as the firmware and configuration schema are compatible.
- ✗
Backup files are saved in plain text format
Why it's wrong here
FortiGate backup files are not necessarily plain text; the backup process offers an optional encryption feature that scrambles the configuration so it cannot be read by unintended parties. If you do not enable encryption, the backup is indeed a readable text file, but the statement that all backups are plain text is incorrect because encrypted backups are not readable. The recommended practice is to always enable password encryption for backups that contain sensitive settings such as pre-shared keys and certificates.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE4 question from scratch — 773 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.