nerdexam
Fortinet

NSE4 · Question #144

When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the configuration…

The correct answer is D. If the password is forgotten, there is no way to use the file. If the password for an encrypted FortiGate configuration backup file is forgotten, the file cannot be decrypted or restored, as there are no recovery mechanisms available.

Submitted by yuki_2020· Apr 18, 2026FortiGate Deployment and System Configuration

Question

When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the configuration file can still be restored using which of the following methods?

Options

  • ASelecting the recover password option during the restore process.
  • BHaving the password emailed to the administrative user by selecting the Forgot Password option.
  • CSending the configuration file to Fortinet Support for decryption.
  • DIf the password is forgotten, there is no way to use the file.

How the community answered

(23 responses)
  • B
    4% (1)
  • C
    9% (2)
  • D
    87% (20)

Why each option

If the password for an encrypted FortiGate configuration backup file is forgotten, the file cannot be decrypted or restored, as there are no recovery mechanisms available.

ASelecting the recover password option during the restore process.

FortiGate units do not offer a "recover password" option during the restore process for encrypted configuration files; the correct password is required.

BHaving the password emailed to the administrative user by selecting the Forgot Password option.

There is no "Forgot Password" option to email an administrative user the password for an encrypted configuration backup file, as this would be a security vulnerability.

CSending the configuration file to Fortinet Support for decryption.

Fortinet Support cannot decrypt a customer's encrypted configuration file; the encryption is designed such that only the passphrase holder can access the data.

DIf the password is forgotten, there is no way to use the file.Correct

For security reasons, FortiGate encrypted configuration files cannot be recovered or decrypted if the password is lost, meaning the file becomes unusable.

Concept tested: FortiGate encrypted configuration backup recovery

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/760431/restoring-a-configuration-file

Topics

#Configuration backup#Encryption#Password recovery#System administration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice