nerdexam
Fortinet

NSE4_FGT-7.0 · Question #86

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6…

The correct answer is A. The IP version of the sources and destinations in a firewall policy must be different. B. The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both D. The IP version of the sources and destinations in a policy must match. Consolidated firewall policies combine IPv4 and IPv6 rules, allowing common fields to be shared while requiring that the IP version of the traffic's source and destination matches for policy evaluation.

Firewall Policies

Question

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

Options

  • AThe IP version of the sources and destinations in a firewall policy must be different.
  • BThe Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both
  • CThe policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6
  • DThe IP version of the sources and destinations in a policy must match.
  • EThe policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and

How the community answered

(32 responses)
  • A
    88% (28)
  • C
    3% (1)
  • E
    9% (3)

Why each option

Consolidated firewall policies combine IPv4 and IPv6 rules, allowing common fields to be shared while requiring that the IP version of the traffic's source and destination matches for policy evaluation.

AThe IP version of the sources and destinations in a firewall policy must be different.Correct

For a firewall policy to be genuinely 'consolidated' for both IPv4 and IPv6, its configuration for sources and destinations must be capable of defining or explicitly include addresses of both IPv4 and IPv6 types, allowing it to apply to both protocol versions.

BThe Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with bothCorrect

Consolidated policies are designed so that generic fields such as Incoming Interface, Outgoing Interface, Schedule, and Service can be configured once and applied to both IPv4 and IPv6 traffic, streamlining policy management.

CThe policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6

While filtering capabilities exist in GUI policy tables, this statement describes a user interface feature rather than a fundamental truth about the configuration or behavior of consolidated policies.

DThe IP version of the sources and destinations in a policy must match.Correct

During actual traffic evaluation, for a specific packet or connection, the IP version of the source address and the destination address must match (e.g., IPv4 source to IPv4 destination or IPv6 source to IPv6 destination) for the policy to apply.

EThe policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and

The statement about the policy table being consolidated is vague and does not provide a specific, verifiable technical truth about the configuration attributes of consolidated policies like the other correct options do.

Concept tested: Consolidated IPv4 and IPv6 firewall policies

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/468206/universal-ipv4-and-ipv6-policies

Topics

#firewall policies#IPv4#IPv6#policy configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4_FGT-7.0 Practice