Exam NSE4_FGT-7.0 topic 1 question 55 discussion

Actual exam question from Fortinet's NSE4_FGT-7.0

Question #: 55
Topic #: 1

[All NSE4_FGT-7.0 Questions]

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

A. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy.
B. NGFW policy-based mode can only be applied globally and not on individual VDOMs.
C. NGFW policy-based mode does not require the use of central source NAT policy.
D. NGFW policy-based mode policies support only flow inspection.

Show Suggested Answer

Suggested Answer: AD 🗳️

by Padl3xx at Dec. 6, 2022, 1:56 p.m.

Comments

Submit Cancel

zeebo340

9 months ago

Selected Answer: AD

A & D - REF Fortigate Security 7.0 368 & 375

upvoted 1 times

...

sauls

10 months, 1 week ago

D. NGFW policy-based mode policies support only flow inspection.

upvoted 1 times

You can now configure FortiGate to operate in NGFW policy mode. NGFW policy mode is a flow-based inspection mode that allows you to configure application signatures, categories, groups, and FortiGuard web filter categories directly on the firewall policy. Other security inspection features, such as antivirus and DLP, are still configured as profiles.

upvoted 1 times

...

sha256

12 months ago

I think A, D is correct; Fortigate Security 7.2 page 315

upvoted 1 times

...

Padl3xx

12 months ago

C,D is correct Fortigate Security 7.0 page 458

upvoted 1 times

ChinkSantana

9 months, 1 week ago

C is not correct. Policy based only supports Central NAT

upvoted 1 times

...

Virutas

12 months ago

C is incorrect, page 445: "NGFW policy-based mode also requires the use of central source NAT (SNAT), instead of NAT settings applied within the firewall policy.". A is correct.

upvoted 2 times

...