StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Connectivity and resources

Practice question 69 of 440 · medium

A filtered debug-flow trace explicitly reports a policy denial for a new client session. What should be inspected next?

Choose the single best answer.

  1. A.Only alter the destination certificate before correcting the stated policy denial
  2. B.Only change the preferred route without checking the denied policy match
  3. C.Only force hardware offload for the denied session
  4. D.The matching policy conditions and ordering for that tuple
Show the answer and explanation

✓ Correct answer

  • The matching policy conditions and ordering for that tuple

The explicit deny directs attention to matching policy conditions and order. Certificate changes, offload and arbitrary route changes do not grant the required forwarding authorization.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.