NSE 4 – FortiGate 6.4 — Question 14

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Answer options

• A. Source defined as Internet Services in the firewall policy.
• B. Destination defined as Internet Services in the firewall policy.
• C. Highest to lowest priority defined in the firewall policy.
• D. Services defined in the firewall policy.
• E. Lowest to highest policy ID number.

Correct answer: A, B, D

Explanation

The correct answers are A, B, and D because the FortiGate firewall uses the source and destination defined as Internet Services and the specific services in the policy to match traffic. The priority of the policies and the policy ID number do not directly affect how a policy matches traffic, making options C and E incorrect.