NSE4 · Question #49
Identify the statement which correctly describes the output of the following command: diagnose ips anomaly list
The correct answer is B. List the real-time counters for the configured DoS policy. The diagnose ips anomaly list command on a FortiGate displays real-time counters and statistics for configured Intrusion Prevention System (IPS) anomaly policies, often related to Denial of Service (DoS) protection.
Question
Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list
Options
- ALists the configured DoS policy.
- BList the real-time counters for the configured DoS policy.
- CLists the errors captured when compiling the DoS policy.
- DLists the IPS signature matches.
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- D3% (1)
Why each option
The `diagnose ips anomaly list` command on a FortiGate displays real-time counters and statistics for configured Intrusion Prevention System (IPS) anomaly policies, often related to Denial of Service (DoS) protection.
This command displays the *runtime status and counters* of DoS anomaly policies, not the detailed configuration settings themselves.
The `diagnose ips anomaly list` command is specifically used to show current statistics, thresholds, and hit counts for IPS anomaly detection policies configured on the FortiGate, providing real-time operational data.
The `diagnose ips anomaly list` command does not report on compilation errors for DoS policies; it focuses on active detection statistics.
This command specifically pertains to IPS anomaly detections (e.g., DoS attacks based on traffic patterns), distinct from listing individual IPS signature matches.
Concept tested: FortiGate CLI `diagnose ips anomaly list`
Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/263590/diagnose-ips-anomaly
Topics
Community Discussion
No community discussion yet for this question.