NSE4 · Question #194
FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed. What action must be taken for…
The correct answer is A. The protection profile must be assigned to a firewall policy. For any FortiGate protection profile to actively inspect traffic, it must be explicitly applied to one or more firewall policies.
Question
FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed. What action must be taken for one of these profiles to become active?
Options
- AThe protection profile must be assigned to a firewall policy.
- BThe "Use Protection Profile" option must be selected in the Web Config tool under the sections for
- CThe protection profile must be set as the Active Protection Profile.
- DAll of the above.
How the community answered
(33 responses)- A91% (30)
- C6% (2)
- D3% (1)
Why each option
For any FortiGate protection profile to actively inspect traffic, it must be explicitly applied to one or more firewall policies.
FortiGate security profiles, including protection profiles, are not active by default; they must be explicitly assigned to a firewall policy. When a firewall policy matches traffic, it then applies the associated security profiles, initiating content inspection and protection based on the profile's configuration.
There isn't a single 'Use Protection Profile' option that globally activates profiles; activation is policy-specific.
There is no global 'Active Protection Profile' setting that makes a profile active across all traffic; profiles are applied per policy.
Since B and C are incorrect, D is also incorrect.
Concept tested: Applying FortiGate security profiles to policies
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/572115/creating-a-new-policy
Topics
Community Discussion
No community discussion yet for this question.