exam questions

Exam NSE4_FGT-6.0 All Questions

View all questions & answers for the NSE4_FGT-6.0 exam

Exam NSE4_FGT-6.0 topic 1 question 38 discussion

Actual exam question from Fortinet's NSE4_FGT-6.0
Question #: 38
Topic #: 1
[All NSE4_FGT-6.0 Questions]

Examine this output from a debug flow:

Why did the FortiGate drop the packet?

  • A. The next-hop IP address is unreachable.
  • B. It failed the RPF check.
  • C. It matched an explicitly configured firewall policy with the action DENY.
  • D. It matched the default implicit firewall policy.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sethjam
4 years, 10 months ago
The (default) drop rule that is the last rule in the policy and that is automatically added has a policy ID number of 0. https://kb.fortinet.com/kb/documentLink.do?externalID=13900
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago