StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 278 of 440 · medium

Which two checks are separate from an application Allow action? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Non-default-port enforcement can still deny recognized traffic
  2. B.Allow changes a deny firewall policy to accept
  3. C.Allow disables all TLS validation
  4. D.The firewall must permit the connection
Show the answer and explanation

✓ Correct answers

  • Non-default-port enforcement can still deny recognized traffic
  • The firewall must permit the connection

Firewall permission and configured port enforcement remain relevant. Application Allow neither overrides firewall deny nor disables TLS trust checks.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.