Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet Exam NSE4_FGT-7.2 Topic 1 Question 21 Discussion

Actual exam question for Fortinet's NSE4_FGT-7.2 exam
Question #: 21
Topic #: 1
[All NSE4_FGT-7.2 Questions]

What are two features of the NGFW policy-based mode? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: C, D

C) NGFW policy-based mode policies support only flow inspection. This is correct.This is a feature of the NGFW policy-based mode, according to the Fortinet documentation 'Profile-based NGFW vs policy-based NGFW'1. The documentation states that ''In policy-based NGFW mode, you can only select flow inspection. Proxy inspection is not supported.''

D) NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy. This is correct.This is a feature of the NGFW policy-based mode, according to the Fortinet documentation 'Profile-based NGFW vs policy-based NGFW'1. The documentation states that ''In policy-based NGFW mode, you allow applications and URL categories to be used directly in security policies, without requiring web filter or application control profiles.''


by Nobuko at Dec 26, 2023, 09:55 PM

Limited Time Offer

25%

Off

Get Premium NSE4_FGT-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Cassi
8 days ago
Good point. Limiting it to just global application could be a drawback. Though I suppose the trade-off might be easier management if it's a one-size-fits-all kind of deal. Still, flexibility is always nice.
upvoted 0 times
...
Candra
9 days ago
But wait, don't we also need to consider the global vs. VDOM application? I'm not sure about option B. Wouldn't it be better if the policy-based mode could be applied to individual VDOMs as well?
upvoted 0 times
...
Mozell
10 days ago
I agree, A and D sound like the best options. The policy-based mode seems designed to simplify firewall management by integrating more functionality directly into the policies. That could be a real time-saver for administrators.
upvoted 0 times
...
Desmond
11 days ago
Hmm, this NGFW policy-based mode question seems a bit tricky. I'm not entirely sure about the specifics, but I'm leaning towards options A and D. The 'no central source NAT policy' and the ability to create applications and web filtering directly in the policy sound like useful features.
upvoted 0 times
...

Save Cancel