NSE 4 – FortiGate 7.2 — Question 97

What are two features of the NGFW policy-based mode? (Choose two.)

Answer options

• A. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy.
• B. NGFW policy-based mode does not require the use of central source NAT policy.
• C. NGFW policy-based mode policies support only flow inspection.
• D. NGFW policy-based mode can only be applied globally and not on individual VDOMs.

Correct answer: A, C

Explanation

The correct answers are A and C because NGFW policy-based mode enables the creation of application and web filtering categories within firewall policies and is restricted to flow inspection. Option B is incorrect since NGFW can utilize central source NAT policy if needed, and option D is wrong because NGFW policies can be applied at both global and VDOM levels.