NSE4 · Question #144
When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the configuration…
The correct answer is D. If the password is forgotten, there is no way to use the file. If the password for an encrypted FortiGate configuration backup file is forgotten, the file cannot be decrypted or restored, as there are no recovery mechanisms available.
Question
When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the configuration file can still be restored using which of the following methods?
Options
- ASelecting the recover password option during the restore process.
- BHaving the password emailed to the administrative user by selecting the Forgot Password option.
- CSending the configuration file to Fortinet Support for decryption.
- DIf the password is forgotten, there is no way to use the file.
How the community answered
(23 responses)- B4% (1)
- C9% (2)
- D87% (20)
Why each option
If the password for an encrypted FortiGate configuration backup file is forgotten, the file cannot be decrypted or restored, as there are no recovery mechanisms available.
FortiGate units do not offer a "recover password" option during the restore process for encrypted configuration files; the correct password is required.
There is no "Forgot Password" option to email an administrative user the password for an encrypted configuration backup file, as this would be a security vulnerability.
Fortinet Support cannot decrypt a customer's encrypted configuration file; the encryption is designed such that only the passphrase holder can access the data.
For security reasons, FortiGate encrypted configuration files cannot be recovered or decrypted if the password is lost, meaning the file becomes unusable.
Concept tested: FortiGate encrypted configuration backup recovery
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/760431/restoring-a-configuration-file
Topics
Community Discussion
No community discussion yet for this question.