Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE7_OTS-7.2 Topic 3 Question 32 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam
Question #: 32
Topic #: 3
[All NSE7_OTS-7.2 Questions]

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D, E

The three criteria that a FortiGate device can use to look for a matching firewall policy to process traffic are:

A) Services defined in the firewall policy - FortiGate devices can match firewall policies based on the services defined in the policy, such as HTTP, FTP, or DNS.

D) Destination defined as internet services in the firewall policy - FortiGate devices can also match firewall policies based on the destination of the traffic, including destination IP address, interface, or internet services.

E) Highest to lowest priority defined in the firewall policy - FortiGate devices can prioritize firewall policies based on the priority defined in the policy. The device will process traffic against the policy with the highest priority first and move down the list until it finds a matching policy.


Fortinet NSE 7 - Enterprise Firewall 6.4 Study Guide, Chapter 4: Policy Implementation, page 4-18.

Contribute your Thoughts:

Lauran
1 months ago
Hmm, let's see... A, C, and E. Easy peasy! Although, I have to say, the priority thing always makes me feel like I'm playing a game of 'Firewall Tetris'.
upvoted 0 times
Rosamond
3 days ago
It can be tricky, but once you get the hang of it, it becomes easier to find the matching firewall policy.
upvoted 0 times
...
Shawnta
14 days ago
I always feel like I'm trying to match the right criteria, just like in a game.
upvoted 0 times
...
Fidelia
15 days ago
A, C, and E are correct! It's like a game of 'Firewall Tetris' with the priority.
upvoted 0 times
...
...
Gayla
2 months ago
No, C is not a criteria. It's A, B, D.
upvoted 0 times
...
Virgilio
2 months ago
A, C, and E, no doubt. Although I do wish the FortiGate would just read my mind and apply the right policy. That would be a true superpower.
upvoted 0 times
Mose
9 days ago
Unfortunately, we have to rely on the criteria set in the firewall policy for now.
upvoted 0 times
...
Brittni
12 days ago
It would be amazing if the FortiGate could read our minds and apply the right policy automatically.
upvoted 0 times
...
Edda
13 days ago
A, C, and E are the correct criteria to look for a matching firewall policy.
upvoted 0 times
...
...
Krissy
2 months ago
Definitely A, C, and E. This is the kind of stuff that keeps network admins up at night, but at least it's not rocket science, right?
upvoted 0 times
...
Delfina
2 months ago
I think C is also a criteria.
upvoted 0 times
...
Gayla
2 months ago
A, B, D are the criteria.
upvoted 0 times
...
Irving
2 months ago
A, C, and E. Gotta love those firewall policies! I'm always squinting at those policy IDs, trying to keep them straight.
upvoted 0 times
Cathrine
12 days ago
It's definitely important to pay attention to all three criteria when setting up firewall policies.
upvoted 0 times
...
Georgeanna
13 days ago
Yeah, the priority defined in the firewall policy is important too.
upvoted 0 times
...
Ramonita
14 days ago
I usually look at the policy ID numbers from lowest to highest.
upvoted 0 times
...
Vi
16 days ago
I always make sure to check the services defined in the firewall policy.
upvoted 0 times
...
Catalina
17 days ago
It's important to pay attention to those firewall policies to ensure traffic is processed correctly.
upvoted 0 times
...
Felton
18 days ago
I prioritize based on the highest to lowest priority defined in the firewall policy.
upvoted 0 times
...
Wade
23 days ago
I usually go from lowest to highest policy ID number to find a matching policy.
upvoted 0 times
...
Roosevelt
1 months ago
I always make sure to check the services defined in the firewall policy.
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77