nerdexam
Fortinet

NSE4_FGT-7.0 · Question #93

An administrator has configured the following settings: What does the configuration do? (Choose two.)

The correct answer is A. Reduces the amount of logs generated by denied traffic. D. Creates a session for traffic being denied. The configured settings create a temporary session for denied traffic by actively rejecting it and simultaneously reduce the amount of logs generated for this denied traffic.

System Configuration

Question

An administrator has configured the following settings:

What does the configuration do? (Choose two.)

Exhibit

NSE4_FGT-7.0 question #93 exhibit

Options

  • AReduces the amount of logs generated by denied traffic.
  • BEnforces device detection on all interfaces for 30 minutes.
  • CBlocks denied users for 30 minutes.
  • DCreates a session for traffic being denied.

How the community answered

(35 responses)
  • A
    94% (33)
  • B
    3% (1)
  • C
    3% (1)

Why each option

The configured settings create a temporary session for denied traffic by actively rejecting it and simultaneously reduce the amount of logs generated for this denied traffic.

AReduces the amount of logs generated by denied traffic.Correct

The configuration reduces the amount of logs by likely setting the firewall policy's logging option to disable or limit log generation for traffic that is explicitly denied, preventing excessive log entries from dropped packets.

BEnforces device detection on all interfaces for 30 minutes.

There is no direct indication that the configuration enforces device detection or sets a 30-minute enforcement duration on all interfaces, as this is unrelated to denying traffic or logging.

CBlocks denied users for 30 minutes.

The configuration is related to handling denied network traffic and its logging, not explicitly blocking specific *users* for a defined duration, which involves different authentication or security profile settings.

DCreates a session for traffic being denied.Correct

The configuration creates a session for traffic being denied, which is typically achieved by setting the firewall policy's action to actively 'reject' the traffic (e.g., by sending a TCP RST or ICMP unreachable message) instead of silently dropping it, necessitating a temporary session state for the response.

Concept tested: FortiGate firewall policy actions and logging

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526786/firewall-policy

Topics

#system configuration#logging#traffic management#device detection

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice