StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Intrusion prevention

Practice question 315 of 440 · medium

CPU is high after enabling packet logging for every IPS signature. Which measured first adjustment preserves signature coverage?

Choose the single best answer.

  1. A.Set socket-size to the model maximum immediately
  2. B.Enable fail-open as permanent normal operation
  3. C.Reduce unnecessary packet logging and reassess load
  4. D.Remove IPS from all internal policies
Show the answer and explanation

✓ Correct answer

  • Reduce unnecessary packet logging and reassess load

Reducing expensive unneeded logging can preserve detection coverage. Blanket removal, blind buffer maximization and permanent bypass do not address the observed logging change responsibly.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.