nse4_fgt-72 Exam QuestionsBrowse all questions from this exam

nse4_fgt-72 Exam - Question 2


Refer to the exhibits.

The exhibits show the firewall policies and the objects used in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

Show Answer
Correct Answer: B

Based on the input criteria, the policy that will be highlighted is the one that matches the incoming interface (port3), source IP (10.0.1.10), destination (facebook.com), and destination port (443) with the protocol TCP. Reviewing the firewall policies, we see that Policy ID 5 matches these criteria. It is configured with port3 as the incoming interface, source as LOCAL_CLIENT (which includes 10.0.1.10), destination as Facebook-Web (including facebook.com), and it lists 'Internet Service' which supports TCP port 443. Therefore, Policy ID 5 is the correct match.

Discussion

17 comments
Sign in to comment
brendommacllummOption: B
Jun 11, 2024

The answer is definitely "B" all Question answer comes from here in my exam : tinyurl.com/23pg4mzx

kp3v0bay5q
Jul 2, 2024

STILL VALID THANKS (USA)

doydipupsa
Jul 9, 2024

thanks for valid answer

xazemumi
Jul 10, 2024

Just took and passed NSE 4 today. Feels good :)

shadow2020Option: B
Mar 1, 2023

there are 3 rules related to port3 and two rules source LOCAL_CLIENT this would leave us with Rule 1 & 5 Rule one Service is = ULL_UDP Rule five = Internet Services Destination port we are looking for is 443 (usually this is TCP) So it had to be PID5

dacmick
Sep 9, 2023

right answer, wrong rationale, look at Slash_JM's reasoning

ama6
Mar 21, 2024

Got 8 new questions will post them tomorrow evening did exam yesterday fortinet is changing the exams like cisco now

raydel92Option: B
Sep 8, 2023

B. Policy with ID 5. Reference and download study guide: https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html

PossaOption: B
Sep 22, 2023

Unica Politica que sai da Porta 3 com destino ao facebook é a opção 3 e 5 Mas a opção 3 Não tem https

YgrecOption: B
Oct 21, 2023

B. POLICY ID 5 for sure.

eroman220Option: B
Nov 9, 2023

B for sure

TiagoFigurOption: B
Nov 16, 2023

A resposta certa é a letra B.

SpikeDadOption: B
Nov 19, 2023

I configured this up on a 60D and it matched ID5. BTW, there is no service called ULL_UDP, obviously a typo, should be ALL_UDP, which excludes them immediately

AMK2ENGOption: B
Dec 22, 2023

B. Policy with ID 5.

znznzn219Option: B
Jan 15, 2024

Correct

MAUROBTAOption: B
Mar 25, 2024

La correcta es la B

IntegrattoOption: B
Mar 27, 2024

Resposta: B

Jere2001Option: B
Apr 23, 2024

The answer is definitely "B"

learner2024Option: B
May 16, 2024

B. As explanied by Slash_JM

Cisco_SE_765Option: B
Jun 4, 2024

The correct one is B

DSB2022Option: B
Jul 20, 2024

It's B, of course.