StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 77 of 440 · hard

Which two statements correctly describe flow-based inspection in conserve mode? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.av-failopen alone determines every flow-inspection decision
  2. B.Enabling IPS fail-open guarantees scanning is retained
  3. C.Extreme memory can never drop new sessions when fail-open is enabled
  4. D.ips global fail-open disable drops new flow-inspected sessions
  5. E.ips global fail-open enable bypasses IPS-engine scans and permits packets below extreme handling
Show the answer and explanation

✓ Correct answers

  • ips global fail-open disable drops new flow-inspected sessions
  • ips global fail-open enable bypasses IPS-engine scans and permits packets below extreme handling

The IPS global fail-open setting controls the flow-engine conserve decision. It is distinct from proxy av-failopen; enabling bypass does not preserve scans or override extreme-memory new-session drops.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.