NSE4 Question #465: Real Exam Question with Answer & Explanation

Question

Which correctly define "Section View" and "Global View" for firewall policies? (Choose two.)

Options

• ASection View lists firewall policies primarily by their interface pairs.
• BSection View lists firewall policies primarily by their sequence number.
• CGlobal View lists firewall policies primarily by their interface pairs.
• DGlobal View lists firewall policies primarily by their policy sequence number.
• EThe 'any' interface may be used with Section View.

Explanation

Section View organizes FortiGate firewall policies by their interface pairs, while Global View lists all policies primarily by their sequence number.

Common mistakes.

• B. Section View groups policies by interface pairs, not primarily by sequence number; sequence numbers are relevant within each interface pair section.
• C. Global View displays all policies by sequence number, not by interface pairs; grouping by interface pairs is the characteristic of Section View.
• E. The 'any' interface can be used in firewall policies regardless of the view mode, and is not a specific feature or limitation tied solely to Section View.

Concept tested. FortiGate firewall policy views (Section vs. Global)

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86047/firewall-policy-views

No community discussion yet for this question.