Question 25

Explanation

B. FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.

• Correct because if fail-open is enabled in the IPS settings, FortiGate bypasses deep packet inspection to keep traffic flowing.

• This ensures that network performance is not significantly impacted, even though security inspection is reduced.

C. FortiGate refuses to accept configuration changes.

• Correct because in Extreme Conserve Mode, FortiGate prevents configuration changes to avoid further memory consumption.

• This helps stabilize the system until memory usage is reduced.

  
  

A. FortiGate halts complete system operation and requires a reboot to regain available resources.

• Incorrect because FortiGate does not completely shut down in conserve mode.

• It limits non-essential functions but continues processing traffic.

• A reboot is not required—the device will recover automatically once memory usage drops below the threshold.

D. FortiGate continues to run critical security actions, such as quarantine.

• Incorrect because in Extreme Conserve Mode, some security actions, such as new session creation and quarantine, may be limited or stopped to free up resources.

• FortiGate prioritizes system stability over additional security tasks.