StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Application control

Practice question 280 of 440 · hard

Which two configurations express different enforcement mechanisms? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Allow an app so a deny firewall policy is bypassed
  2. B.Block recognized FTP when it uses a non-default signature port
  3. C.Permit only HTTP on server port 80 and block protocol violations
  4. D.Name a TCP 443 service HTTPS and thereby verify payload
Show the answer and explanation

✓ Correct answers

  • Block recognized FTP when it uses a non-default signature port
  • Permit only HTTP on server port 80 and block protocol violations

Application port enforcement and network protocol enforcement inspect different relationships. A service label does not validate payload and app Allow cannot bypass firewall deny.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.