StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Intrusion prevention

Practice question 317 of 440 · hard

A confirmed NTurbo data path is overloaded. IPS fail-open is enabled. Why can traffic still drop?

Choose the single best answer.

  1. A.NTurbo-offloaded sessions do not support this fail-open bypass
  2. B.Enabled fail-open means the server certificate is expired
  3. C.The setting applies only to DNS categories
  4. D.A packet log necessarily blocks every session
Show the answer and explanation

✓ Correct answer

  • NTurbo-offloaded sessions do not support this fail-open bypass

The NTurbo exception allows drops regardless of fail-open. TLS expiry, DNS categories and a universal packet-log block are not the mechanism.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.