StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 74 of 440 · medium

The FortiGate exits conserve mode, but antivirus-proxy bypass remains until an administrator changes the failopen setting. Which setting explains this?

Choose the single best answer.

  1. A.av-failopen off
  2. B.ips fail-open disable
  3. C.av-failopen one-shot
  4. D.av-failopen pass
Show the answer and explanation

✓ Correct answer

  • av-failopen one-shot

One-shot intentionally preserves proxy bypass after recovery. Pass resumes once the condition resolves, off blocks applicable new proxy sessions, and IPS fail-open is the flow-engine control.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.