nerdexam
FortinetFortinet

NSE4 · Question #279

NSE4 Question #279: Real Exam Question with Answer & Explanation

Sign in or unlock NSE4 to reveal the answer and full explanation for question #279. The question stem and answer options stay visible for context.

Submitted by kevin_r· Apr 18, 2026Firewall Policies and Authentication

Question

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121. Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message. Which of the following statements represents the best solution to this problem?

Options

  • ACreate a new session helper for the FTP service monitoring port 2121.
  • BEnable the ANY service in the firewall policies for both incoming and outgoing traffic.
  • CPlace the client and server interface in the same zone and enable intra-zone traffic.
  • DDisable any protection profiles being applied to FTP traffic.

Unlock NSE4 to see the answer

You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#FTP ALG#Session Helper#FortiGate Troubleshooting#Application Layer Gateway
Full NSE4 PracticeBrowse All NSE4 Questions