Configure Firewall Policies NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a characteristic of proxy-based inspection in FortiOS?

   • AIt processes packets in real time without buffering
   • BIt does not support SSL inspection
   • CIt buffers and reassembles traffic for deep inspection
   • DIt only inspects the first packet of a session
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a traffic log, you see a session with action 'deny'. What does this indicate?

   • AThe traffic was routed to another interface
   • BThe traffic was blocked by a firewall policy
   • CThe traffic was encrypted
   • DThe traffic was allowed but not logged
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What does the 'policyid' field in a FortiOS traffic log represent?

   • AThe severity level of the log
   • BThe source port of the traffic
   • CThe ID of the firewall policy that matched the traffic
   • DThe action taken by the firewall
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When selecting an inspection mode, which factor should be considered first?

   • AThe version of FortiOS installed
   • BThe performance requirements and security needs of the network
   • CThe number of firewall policies configured
   • DThe type of physical interface used
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In which scenario is flow-based inspection most suitable?

   • AScenarios where maximum security is required over performance
   • BEnvironments requiring deep packet inspection of every byte
   • CHigh-throughput environments where performance is critical
   • DNetworks with strict compliance requirements for data buffering
   Reveal Solution Discussion Select an answer first