nerdexam
Fortinet

NSE4 · Question #161

Examine the firewall configuration shown below; then answer the question following it. Which of the following statements are correct based on the firewall configuration illustrated in the exhibit?…

The correct answer is A. A user can access the Internet using only the protocols that are supported by user authentication. D. A user cannot access the Internet using any protocols unless the user has passed firewall. The firewall configuration shown mandates user authentication for all Internet access, thereby restricting users to only those protocols that support authentication for their Internet connectivity.

Submitted by tom_us· Apr 18, 2026Firewall Policies and Authentication

Question

Examine the firewall configuration shown below; then answer the question following it. Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)

Exhibit

NSE4 question #161 exhibit

Options

  • AA user can access the Internet using only the protocols that are supported by user authentication.
  • BA user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP.
  • CA user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can
  • DA user cannot access the Internet using any protocols unless the user has passed firewall

How the community answered

(35 responses)
  • A
    66% (23)
  • B
    23% (8)
  • C
    11% (4)

Why each option

The firewall configuration shown mandates user authentication for all Internet access, thereby restricting users to only those protocols that support authentication for their Internet connectivity.

AA user can access the Internet using only the protocols that are supported by user authentication.Correct

If a firewall configuration requires authentication for Internet access, only protocols capable of carrying or initiating an authentication challenge (e.g., HTTP, HTTPS, FTP, Telnet, SSH) would allow a user to authenticate and subsequently access the Internet.

BA user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP.

This is incorrect because if authentication is required for all protocols, a user cannot access the Internet using any protocol unless authenticated, not just specific ones being excluded.

CA user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can

While HTTP, HTTPS, FTP, and Telnet can be used for authentication, SSH is also often employed, and the statement is too restrictive by implying these are the only required authentication protocols and not fully describing the outcome.

DA user cannot access the Internet using any protocols unless the user has passed firewallCorrect

This statement confirms that no Internet access is permitted until the user has successfully authenticated with the firewall, indicating mandatory authentication for all protocols.

Concept tested: FortiGate firewall user authentication and protocol enforcement

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523668/firewall-authentication-and-authentication-rules

Topics

#Firewall Authentication#Firewall Policies#User Access Control#Protocol Filtering

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice