StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Intrusion prevention

Practice question 318 of 440 · medium

During ordinary conserve mode, new sessions require flow-based inspection. ips global fail-open is disabled. What should be expected?

Choose the single best answer.

  1. A.Proxy av-failopen Pass necessarily overrides the flow setting
  2. B.Every new session is deeply inspected normally
  3. C.The firewall changes the profile to proxy
  4. D.Those new sessions are dropped
Show the answer and explanation

✓ Correct answer

  • Those new sessions are dropped

Flow conserve behavior uses the IPS global fail-open setting. Proxy controls do not override it and conserve does not automatically convert inspection modes.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.