exam questions

Exam NSE4_FGT-7.2 All Questions

View all questions & answers for the NSE4_FGT-7.2 exam

Exam NSE4_FGT-7.2 topic 1 question 79 discussion

Actual exam question from Fortinet's NSE4_FGT-7.2
Question #: 79
Topic #: 1
[All NSE4_FGT-7.2 Questions]

What is a reason for triggering IPS fail open?

  • A. The IPS socket buffer is full and the IPS engine cannot process additional packets.
  • B. The IPS engine cannot decode a packet.
  • C. The IPS engine is upgraded.
  • D. The administrator enabled NTurbo acceleration.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
GeniusA
1 year, 4 months ago
A is a valid response
upvoted 1 times
...
shilp21
1 year, 7 months ago
Selected Answer: A
https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPS-socket-size-and-fail-open-mode/ta-p/191254
upvoted 1 times
...
darkstar15
1 year, 8 months ago
Tambien hay una referencia en administration guide pag. 1313 A fail-open scenario is triggered when IPS raw socket buffer is full. Therefore IPS engine has no space in memory to create more sessions and needs to decide whether to drop the sessions or bypass the sessions without inspection
upvoted 4 times
...
Halmonte0780
1 year, 9 months ago
A is the correct answer. FortiGate_Security_7.2_Study_Guide Page 418
upvoted 3 times
...
Dave304409
1 year, 9 months ago
Selected Answer: A
A is the correct answer.
upvoted 1 times
...
Takumi
1 year, 9 months ago
Selected Answer: A
The answer is A
upvoted 1 times
...
Lapegues
1 year, 9 months ago
Selected Answer: A
source : Fortinet community: Technical Tip: IPS - 'socket size' and 'fail-open' mode
upvoted 1 times
...
itmaxuser
1 year, 9 months ago
A is correct
upvoted 1 times
...
lupnoob
1 year, 9 months ago
Selected Answer: A
Answer is A. https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPS-socket-size-and-fail-open-mode/ta-p/191254#:~:text=A%20'fail%2Dopen'%20scenario,or%20bypass%20them%20without%20inspection.
upvoted 1 times
...
nambomm
1 year, 9 months ago
A is the right answer.
upvoted 1 times
...
ansalias
1 year, 9 months ago
Selected Answer: A
A is the correct answer. The IPS socket buffer is full, see Infrastructure Guide p.368
upvoted 2 times
...
imwatever
1 year, 9 months ago
Selected Answer: A
Sec 7.2 p.418
upvoted 1 times
...
nambomm
1 year, 9 months ago
Answer is A
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago