nerdexam
Fortinet

NSE4_FGT-7.0 · Question #57

NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

The correct answer is B. Antivirus. When FortiGate operates in NGFW policy-based mode, most security profiles become integrated directly into firewall policies, but the Antivirus profile remains a separate, traditional profile.

Security Profiles

Question

NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

Options

  • AWeb filtering
  • BAntivirus
  • CWeb proxy
  • DApplication control

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    95% (18)

Why each option

When FortiGate operates in NGFW policy-based mode, most security profiles become integrated directly into firewall policies, but the Antivirus profile remains a separate, traditional profile.

AWeb filtering

Web filtering in NGFW policy-based mode is typically configured directly within the firewall policy, integrating its settings into the rule itself.

BAntivirusCorrect

In NGFW policy-based mode, security features like web filtering, application control, and intrusion prevention are configured directly within the firewall policy rules, providing granular control. However, Antivirus inspection remains a traditional security profile that is applied to policies, meaning its configuration method does not change to be policy-embedded.

CWeb proxy

While web proxy can be related to web filtering, its configuration or application would also align with the policy-based inspection paradigm in NGFW mode.

DApplication control

Application control, a core NGFW feature, is integrated directly into policy-based firewall rules for granular application identification and enforcement.

Concept tested: FortiGate NGFW Policy-based Inspection Profiles

Source: https://docs.fortinet.com/document/fortigate/7.2.0/administration-guide/441434/ngfw-policy-based-mode

Topics

#NGFW mode#policy-based inspection#security profiles#Antivirus

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice