NSE 4 – FortiGate 7.0 — Question 86

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Answer options

• A. Highest to lowest priority defined in the firewall policy.
• B. Services defined in the firewall policy.
• C. Source defined as Internet Services in the firewall policy.
• D. Lowest to highest policy ID number.
• E. Destination defined as Internet Services in the firewall policy.

Correct answer: B, C, E

Explanation

The correct options are B, C, and E because they represent the specific parameters defined in a firewall policy that FortiGate can utilize to match traffic. Option A is incorrect as it refers to priority which is not a matching criterion. Option D is also incorrect since the policy ID number does not influence traffic matching in this context.