StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 264 of 440 · medium

A policy permits TCP 2121. Recognized FTP is Monitor, but non-default-port enforcement is enabled and the installed signature defines port 21. Why is the session blocked?

Choose the single best answer.

  1. A.FTP detection requires a deny firewall policy
  2. B.The app is recognized on a non-default signature port
  3. C.Monitor always blocks after the first event
  4. D.The firewall changes port 2121 into port 21
Show the answer and explanation

✓ Correct answer

  • The app is recognized on a non-default signature port

Port enforcement can block an otherwise monitored app on a non-default port. Monitor itself allows; no automatic port conversion or deny-policy requirement exists.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.