StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 270 of 440 · medium

Synthetic event: subtype="app-ctrl" appid=12345 action="block" policyid=31. A correlated traffic event says Accept. Which conclusion fits?

Choose the single best answer.

  1. A.The app block is invalid because Accept is present
  2. B.Policy 31 necessarily has action deny
  3. C.App ID 12345 is a TCP port number
  4. D.Application control denied traffic accepted by policy 31
Show the answer and explanation

✓ Correct answer

  • Application control denied traffic accepted by policy 31

A later application action can deny an accepted connection. The traffic accept does not invalidate it; appid identifies a signature, not a transport port.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.