Which two statements are correct about NGFW Policy-based mode? (Choose two.)

NGFW policy-based mode allows direct configuration of application and web filtering categories within firewall policies and exclusively uses flow inspection.

Firewall Policies

Question

Options

ANGFW policy-based mode does not require the use of central source NAT policy
BNGFW policy-based mode can only be applied globally and not on individual VDOMs
CNGFW policy-based mode supports creating applications and web filtering categories directly in a
DNGFW policy-based mode policies support only flow inspection Answer: CD

Why each option

NGFW policy-based mode allows direct configuration of application and web filtering categories within firewall policies and exclusively uses flow inspection.

ANGFW policy-based mode does not require the use of central source NAT policy

NGFW policy-based mode still requires central source NAT policies to define how internal IP addresses are translated for outbound connections, it does not eliminate the need for NAT.

BNGFW policy-based mode can only be applied globally and not on individual VDOMs

NGFW policy-based mode can be configured and applied to individual VDOMs, allowing for granular security policy management within a multi-tenant or segmented environment.

CNGFW policy-based mode supports creating applications and web filtering categories directly in a

DNGFW policy-based mode policies support only flow inspection Answer: CD

Concept tested: FortiGate NGFW Policy-based mode features

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/469046/ngfw-modes

Topics

#NGFW policy mode#central source NAT#application control#web filtering

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice