FCP – FortiGate Administrator 7.4 — Question 68

What are two features of the NGFW profile-based mode? (Choose two.)

Answer options

• A. NGFW profile-based mode can only be applied globally and not on individual VDOMs.
• B. NGFW profile-based mode must require the use of central source NAT policy.
• C. NGFW profile-based mode policies support both flow inspection and proxy inspection.
• D. NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

Correct answer: C, D

Explanation

The correct answers are C and D because NGFW profile-based mode indeed allows for both flow and proxy inspection, as well as the application of various profiles in firewall policies. Options A and B are incorrect; the mode can be applied on individual VDOMs, and it does not require a central source NAT policy.