StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 261 of 440 · easy

A firewall service named HTTPS permits TCP 443. An unwanted tunnel also uses that port. Which control identifies and restricts the tunnel?

Choose the single best answer.

  1. A.An application sensor with relevant signatures.
  2. B.Permit only TCP 443 without identifying its carried application.
  3. C.Use only forward traffic Accept logging for the connection.
  4. D.Use certificate-only inspection without an application sensor.
Show the answer and explanation

✓ Correct answer

  • An application sensor with relevant signatures.

Application-control signatures identify and restrict the carried tunnel. Port permission and traffic logging do not identify its application; certificate inspection alone does not supply an application-sensor decision.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.