nerdexam
Fortinet

NSE7_OTS-7.2 · Question #27

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

The correct answer is A. Services defined in the firewall policy. B. Source defined as internet services in the firewall policy D. Destination defined as internet services in the firewall policy. When a packet arrives, how does FortiGate find a matching policy? Each policy has match criteria, which you can define using the following objects: - Incoming Interface - Outgoing Interface - Source: IP address, user, internet services - Destination: IP address or internet…

FortiGate OT Security

Question

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Options

  • AServices defined in the firewall policy.
  • BSource defined as internet services in the firewall policy
  • CLowest to highest policy ID number
  • DDestination defined as internet services in the firewall policy
  • EHighest to lowest priority defined in the firewall policy

How the community answered

(52 responses)
  • A
    71% (37)
  • C
    17% (9)
  • E
    12% (6)

Explanation

When a packet arrives, how does FortiGate find a matching policy? Each policy has match criteria, which you can define using the following objects: - Incoming Interface - Outgoing Interface - Source: IP address, user, internet services - Destination: IP address or internet services - Service: IP protocol and port number - Schedule: Applies during configured times

Topics

#firewall policy#traffic matching#internet services#policy processing order

Community Discussion

No community discussion yet for this question.

Full NSE7_OTS-7.2 Practice