NSE 8 – Network Security Expert — Question 24

You notice that memory usage is high and FortiGate has entered conserve mode. You want FortiGates IPS engine to focus only on exploits and attacks that are applicable to your specific network.
Which two steps would you take to reduce RAM usage without weakening security? (Choose two.)

Answer options

• A. Configure IPS to pass files that are larger than a specific threshold, instead of buffering and scanning them.
• B. Reduce the size of the signature three (filters) that FortiGate must search by disabling scans for applications and OS stacks that do not exist on your network.
• C. Disable application control for protocols that are not used on your network.
• D. Disable IPS for traffic destined for the FortiGate itself.

Correct answer: A, D

Explanation

The correct options A and D help to reduce RAM usage effectively. Option A allows the IPS to bypass large files, reducing the memory needed for scanning, while option D stops the IPS from analyzing traffic to itself, which is unnecessary. Options B and C, while potentially useful, do not directly address RAM usage in the same way as A and D.