nerdexam
Fortinet

NSE4 · Question #196

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate Web Config and also using the CLI. The command used in the CLI to perform this function is ________

The correct answer is D. move. In the FortiGate CLI, the move command is used within the firewall policy configuration section to change the order in which policies are evaluated.

Submitted by daniela_cl· Apr 18, 2026Firewall Policies and Authentication

Question

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate Web Config and also using the CLI. The command used in the CLI to perform this function is __________.

Options

  • Aset order
  • Bedit policy
  • Creorder
  • Dmove

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    4% (1)
  • D
    85% (22)

Why each option

In the FortiGate CLI, the `move` command is used within the firewall policy configuration section to change the order in which policies are evaluated.

Aset order

`set order` is not a standard FortiGate CLI command for reordering policies.

Bedit policy

`edit policy` is used to enter the configuration mode for a specific policy, not to reorder it.

Creorder

`reorder` is not the correct command syntax for changing policy order in FortiGate CLI.

DmoveCorrect

To reorder firewall policies in the FortiGate CLI, the `move` command is used within the `config firewall policy` context. This command allows administrators to specify a policy ID and its new position relative to other policies (e.g., `move <policy_id> before <another_policy_id>`).

Concept tested: FortiGate CLI policy management

Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/611634/firewall-policy

Topics

#Firewall Policies#CLI Commands#Policy Ordering#FortiGate CLI

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice