NSE4_FGT-7.0 · Question #101
Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)
The correct answer is B. User or user group D. FQDN address. FortiGate firewall policies allow various objects to be specified in the Source field to define the origin of traffic. User identities and dynamically resolvable domain names are valid source objects.
Question
Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)
Options
- AFirewall service
- BUser or user group
- CIP Pool
- DFQDN address
How the community answered
(22 responses)- A5% (1)
- B91% (20)
- C5% (1)
Why each option
FortiGate firewall policies allow various objects to be specified in the Source field to define the origin of traffic. User identities and dynamically resolvable domain names are valid source objects.
Firewall services define the destination port and protocol, such as HTTP or HTTPS, and are selected for the Service field of a policy, not the Source field.
A firewall policy's Source field can be configured with a 'User or user group' object, enabling policies to be applied based on authenticated user identities, thereby providing user-aware security.
IP Pools are typically used in NAT configurations to specify a range of IP addresses for source or destination translation, not as source objects for matching incoming traffic in a firewall policy.
FQDN (Fully Qualified Domain Name) address objects can be selected for the Source field, allowing policies to dynamically resolve domain names to IP addresses, which is useful for services with fluctuating IP addresses.
Concept tested: FortiGate firewall policy source objects
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/30713/firewall-policies
Topics
Community Discussion
No community discussion yet for this question.