NSE7 Troubleshooting and Diagnostics Practice Question
A FortiGate administrator wants to monitor performance thresholds to be alerted when the firewall is under heavy load. Which THREE metrics can be monitored using the built-in performance monitoring features (e.g., 'diagnose sys top' or SNMP)?
⚠ Common exam trap
Many exam-takers confuse static interface properties (like speed) with dynamic performance metrics, or mistakenly think disk space is relevant to firewall load, when in fact only CPU, memory, and session counts are directly monitored for performance thresholds.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CPU utilization percentage
The built-in 'diagnose sys top' command and SNMP monitoring both provide real-time CPU utilization percentage, which is a key metric for detecting heavy load on a FortiGate firewall. High CPU usage can indicate resource contention, impacting packet processing and overall performance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
CPU utilization percentage
Why this is correct
CPU usage is a critical performance indicator.
- ✗
Interface speed
Why it's wrong here
Interface speed is a fixed capacity, not a dynamic load metric.
- ✓
Number of concurrent sessions
Why this is correct
Session count indicates how many connections the firewall is handling; high counts can indicate overload.
- ✗
Disk space utilization
Why it's wrong here
Disk space is a storage metric, not directly related to real-time performance load.
- ✓
Memory utilization percentage
Why this is correct
Memory usage affects overall system performance.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.