NSE 7 – Enterprise Firewall 7.0 — Question 17

Which two configuration commands change the default behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

Answer options

• A. set av-failopen off
• B. set av-failopen pass
• C. set fail-open enable
• D. set ips fail-open disable

Correct answer: A, C

Explanation

The correct answers, A and C, specify configurations that prevent the system from allowing traffic to pass through unchecked when in conserve mode. Option B does not change the fail-open behavior, and option D disables IPS fail-open, which is not relevant in this context.