Exam NSE4_FGT_AD-7.6 Topic 3 Question 3 Discussion

Actual exam question for Fortinet's NSE4_FGT_AD-7.6 exam
Question #: 3
Topic #: 3
An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

Suggested Answer: B,D Vote an answer

During the session, if a security profile detects a violation, FortiGate records the attack log immediately. To reduce the number of log messages generated and improve performance, you can enable a session table entry of dropped traffic. This creates the denied session in the session table and, if the session is denied, all packets of that session are also denied. This ensures that FortiGate does not have to perform a policy lookup for each new packet matching the denied session, which reduces CPU usage and log generation.
The CLI command is ses-denied-traffic. You can also set the duration for block sessions. This determines how long a session will be kept in the session table by setting block-session-timer in the CLI. By default, it is set to 30 seconds.

by Winifred at Oct 13, 2026, 07:33 PM

Limited Time Offer

15%

Off

Get Premium NSE4_FGT_AD-7.6 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10