nerdexam
Fortinet

NSE4_FGT-7.0 · Question #58

Which statement about the policy ID number of a firewall policy is true?

The correct answer is A. It is required to modify a firewall policy using the CLI. The policy ID is a unique numerical identifier assigned to each firewall policy and is essential for referencing and modifying specific policies via the command-line interface.

Firewall Policies

Question

Which statement about the policy ID number of a firewall policy is true?

Options

  • AIt is required to modify a firewall policy using the CLI.
  • BIt represents the number of objects used in the firewall policy.
  • CIt changes when firewall policies are reordered.
  • DIt defines the order in which rules are processed.

How the community answered

(49 responses)
  • A
    94% (46)
  • C
    2% (1)
  • D
    4% (2)

Why each option

The policy ID is a unique numerical identifier assigned to each firewall policy and is essential for referencing and modifying specific policies via the command-line interface.

AIt is required to modify a firewall policy using the CLI.Correct

When interacting with FortiGate firewall policies through the CLI, each policy is uniquely identified by its policy ID number. This ID is mandatory when using commands to edit, show, or delete a specific policy, ensuring the correct rule is targeted.

BIt represents the number of objects used in the firewall policy.

The policy ID is a unique identifier for the policy itself and does not reflect the number of objects (addresses, services, etc.) configured within that policy.

CIt changes when firewall policies are reordered.

The policy ID is a static, unique identifier assigned upon creation and does not change even if the firewall policies are reordered in the policy list.

DIt defines the order in which rules are processed.

While firewall policies are processed in order from top to bottom, the policy ID itself is just an identifier; the actual processing order is determined by the policy's position in the list, not by its numerical ID value.

Concept tested: FortiGate Firewall Policy ID Usage

Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/641011/config-firewall-policy

Topics

#firewall policy#policy ID#CLI configuration

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice