Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

Question

Options

• AFortiGate continues to run critical security actions, such as quarantine.
• BFortiGate refuses to accept configuration changes.
• CFortiGate halts complete system operation and requires a reboot to regain available resources.
• DFortiGate continues to transmit packets without IPS inspection when the fail-open global setting in

• A
  8% (3)
• B
  89% (34)
• C
  3% (1)

Explanation

Two correct statements about FortiGate conserve mode are: (B) FortiGate refuses to accept configuration changes while in conserve mode - this prevents additional memory allocation that would worsen the low-memory condition, protecting system stability; and (D) FortiGate continues to transmit packets without IPS inspection when the 'fail-open' global setting is enabled - this ensures traffic is not dropped entirely during the memory crisis, trading security depth for availability. Option A is false - FortiGate reduces or disables resource-intensive security features like quarantine during conserve mode, not maintains them. Option C is false - FortiGate does not halt all operations or require a reboot; it continues forwarding traffic but suspends memory-intensive processes until memory is reclaimed.

No community discussion yet for this question.