StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 273 of 440 · hard

No decoder has confirmed a protocol on port 80. Which additional condition supports a protocol violation when only HTTP is permitted?

Choose the single best answer.

  1. A.The decoder has ruled out HTTP
  2. B.The first packet was too short to classify yet
  3. C.The destination hostname contains ftp
  4. D.The source port is ephemeral
Show the answer and explanation

✓ Correct answer

  • The decoder has ruled out HTTP

Ruling out all permitted protocols supports the violation. Early incomplete classification, hostname text and normal ephemeral source ports alone do not establish it.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.