Configure Firewall Policies NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which security feature is typically available in flow-based inspection?

   • AFull SSL certificate inspection
   • BApplication control with full payload analysis
   • CData leak prevention with file buffering
   • DAntivirus scanning
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An administrator is troubleshooting why a specific user cannot access a web server. The traffic log shows the traffic is being denied by policy 20. The administrator checks policy 20 and sees it has a source of 'all' and a destination of 'all'. What is the best action to resolve the issue while maintaining security?

   • AModify policy 20 to exclude the user's IP address from the source.
   • BDelete policy 20.
   • CMove the allow policy for the user above policy 20.
   • DCheck if the user's traffic is supposed to be denied by policy 20.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A user reports they cannot access a server on another subnet. Which log should you check first to troubleshoot?

   • AEvent logs for system reboots
   • BTraffic logs for denied traffic
   • CAntivirus logs for virus detections
   • DVPN logs for tunnel status
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A company has a FortiGate with a policy that allows internal users to access the internet. The policy has a schedule that is active only during business hours (9 AM to 5 PM). A user tries to access the internet at 8 AM and fails. What is the most likely reason?

   • AThe policy schedule is not active at 8 AM, so the traffic does not match the policy.
   • BThe user's IP address is not in the source address range of the policy.
   • CThe policy is placed below a deny policy that matches all traffic.
   • DThe policy is configured with flow-based inspection, which is not available at 8 AM.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   An administrator has two firewall policies: Policy 1 allows source 10.0.0.0/8 to destination any on service HTTP, and Policy 2 denies source 10.0.1.0/24 to destination any on service HTTP. Both policies are in the same policy list. A user with IP 10.0.1.50 tries to access a web server on HTTP. Which policy will match the traffic?

   • ANeither policy will match because the source is in a different subnet.
   • BPolicy 2, because it is more specific and should take precedence.
   • CBoth policies will match, and the traffic will be denied because the deny policy is more specific.
   • DPolicy 1, because it is placed above Policy 2 and the source 10.0.1.50 is within 10.0.0.0/8.
   Reveal Solution Discussion Select an answer first