NSE 4 – FortiGate 7.0 — Question 55

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Answer options

• A. Certificate inspection
• B. Flow-based inspection
• C. Proxy-based inspection
• D. Full Content inspection

Correct answer: B

Explanation

The correct answer is B, Flow-based inspection, which allows for faster processing of traffic by inspecting packets in real-time. The other options, such as Certificate inspection and Proxy-based inspection, are not applicable in a policy-based NGFW setup, and Full Content inspection typically involves a more resource-intensive approach that is not the default mode for this configuration.