Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE7_OTS-7.2 Topic 3 Question 32 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam
Question #: 32
Topic #: 3
[All NSE7_OTS-7.2 Questions]

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D, E

The three criteria that a FortiGate device can use to look for a matching firewall policy to process traffic are:

A) Services defined in the firewall policy - FortiGate devices can match firewall policies based on the services defined in the policy, such as HTTP, FTP, or DNS.

D) Destination defined as internet services in the firewall policy - FortiGate devices can also match firewall policies based on the destination of the traffic, including destination IP address, interface, or internet services.

E) Highest to lowest priority defined in the firewall policy - FortiGate devices can prioritize firewall policies based on the priority defined in the policy. The device will process traffic against the policy with the highest priority first and move down the list until it finds a matching policy.


Fortinet NSE 7 - Enterprise Firewall 6.4 Study Guide, Chapter 4: Policy Implementation, page 4-18.

Contribute your Thoughts:

Lauran
30 days ago
Hmm, let's see... A, C, and E. Easy peasy! Although, I have to say, the priority thing always makes me feel like I'm playing a game of 'Firewall Tetris'.
upvoted 0 times
Shawnta
6 days ago
I always feel like I'm trying to match the right criteria, just like in a game.
upvoted 0 times
...
Fidelia
7 days ago
A, C, and E are correct! It's like a game of 'Firewall Tetris' with the priority.
upvoted 0 times
...
...
Gayla
1 months ago
No, C is not a criteria. It's A, B, D.
upvoted 0 times
...
Virgilio
1 months ago
A, C, and E, no doubt. Although I do wish the FortiGate would just read my mind and apply the right policy. That would be a true superpower.
upvoted 0 times
Mose
23 hours ago
Unfortunately, we have to rely on the criteria set in the firewall policy for now.
upvoted 0 times
...
Brittni
4 days ago
It would be amazing if the FortiGate could read our minds and apply the right policy automatically.
upvoted 0 times
...
Edda
5 days ago
A, C, and E are the correct criteria to look for a matching firewall policy.
upvoted 0 times
...
...
Krissy
1 months ago
Definitely A, C, and E. This is the kind of stuff that keeps network admins up at night, but at least it's not rocket science, right?
upvoted 0 times
...
Delfina
1 months ago
I think C is also a criteria.
upvoted 0 times
...
Gayla
2 months ago
A, B, D are the criteria.
upvoted 0 times
...
Irving
2 months ago
A, C, and E. Gotta love those firewall policies! I'm always squinting at those policy IDs, trying to keep them straight.
upvoted 0 times
Cathrine
4 days ago
It's definitely important to pay attention to all three criteria when setting up firewall policies.
upvoted 0 times
...
Georgeanna
5 days ago
Yeah, the priority defined in the firewall policy is important too.
upvoted 0 times
...
Ramonita
6 days ago
I usually look at the policy ID numbers from lowest to highest.
upvoted 0 times
...
Vi
8 days ago
I always make sure to check the services defined in the firewall policy.
upvoted 0 times
...
Catalina
9 days ago
It's important to pay attention to those firewall policies to ensure traffic is processed correctly.
upvoted 0 times
...
Felton
10 days ago
I prioritize based on the highest to lowest priority defined in the firewall policy.
upvoted 0 times
...
Wade
15 days ago
I usually go from lowest to highest policy ID number to find a matching policy.
upvoted 0 times
...
Roosevelt
25 days ago
I always make sure to check the services defined in the firewall policy.
upvoted 0 times
...
...

Save Cancel
a