Exam NSE7_EFW-7.2 Topic 1 Question 41 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam
Question #: 41
Topic #: 1
After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

Suggested Answer: D Vote an answer

Fail-open is a feature that allows traffic to pass through the IPS sensor without inspection when the sensor fails or is overloaded. If fail-open is set to disable, traffic will be dropped in such scenarios1. References:
= IPS | FortiGate / FortiOS 7.2.3 - Fortinet Documentation
When IPS (Intrusion Prevention System) is configured, iffail-openis set to disable, it means that if the IPS engine fails, traffic will not be allowed to pass through, which can result in traffic being dropped (D). This is in contrast to a fail-open setting, which would allow traffic to bypass the IPS engine if it is not operational.

by Evangeline at Nov 29, 2024, 03:15 AM

Limited Time Offer

15%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10