Exam NSE4_FGT-7.0 topic 1 question 55 discussion

Actual exam question from Fortinet's NSE4_FGT-7.0

Question #: 55
Topic #: 1

[All NSE4_FGT-7.0 Questions]

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

A. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy.
B. NGFW policy-based mode can only be applied globally and not on individual VDOMs.
C. NGFW policy-based mode does not require the use of central source NAT policy.
D. NGFW policy-based mode policies support only flow inspection.

Show Suggested Answer

Suggested Answer: AD 🗳️

by Padl3xx at Dec. 6, 2022, 1:56 p.m.

Comments

Submit Cancel

zeebo340

10 months, 3 weeks ago

Selected Answer: AD

A & D - REF Fortigate Security 7.0 368 & 375

upvoted 1 times

...

sauls

1 year ago

D. NGFW policy-based mode policies support only flow inspection.

upvoted 1 times

You can now configure FortiGate to operate in NGFW policy mode. NGFW policy mode is a flow-based inspection mode that allows you to configure application signatures, categories, groups, and FortiGuard web filter categories directly on the firewall policy. Other security inspection features, such as antivirus and DLP, are still configured as profiles.

upvoted 1 times

...

sha256

1 year, 1 month ago

I think A, D is correct; Fortigate Security 7.2 page 315

upvoted 1 times

...

Padl3xx

1 year, 1 month ago

C,D is correct Fortigate Security 7.0 page 458

upvoted 1 times

ChinkSantana

11 months ago

C is not correct. Policy based only supports Central NAT

upvoted 1 times

...

Virutas

1 year, 1 month ago

C is incorrect, page 445: "NGFW policy-based mode also requires the use of central source NAT (SNAT), instead of NAT settings applied within the firewall policy.". A is correct.

upvoted 2 times

...