ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 19 - NSE7_EFW-7.2 discussion

Report
Export

After enabling IPS you receive feedback about traffic being dropped.

What could be the reason?

A.
Np-accel-mode is set to enable
Answers
A.
Np-accel-mode is set to enable
B.
Traffic-submit is set to disable
Answers
B.
Traffic-submit is set to disable
C.
IPS is configured to monitor
Answers
C.
IPS is configured to monitor
D.
Fail-open is set to disable
Answers
D.
Fail-open is set to disable
Suggested answer: D

Explanation:

Fail-open is a feature that allows traffic to pass through the IPS sensor without inspection when the sensor fails or is overloaded.If fail-open is set to disable, traffic will be dropped in such scenarios1.Reference: =IPS | FortiGate / FortiOS 7.2.3 - Fortinet Documentation

When IPS (Intrusion Prevention System) is configured, if fail-open is set to disable, it means that if the IPS engine fails, traffic will not be allowed to pass through, which can result in traffic being dropped (D). This is in contrast to a fail-open setting, which would allow traffic to bypass the IPS engine if it is not operational.

asked 18/09/2024
Arthur la Feber
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first