A group-based permit is followed by a broad matching unauthenticated permit. Default auth-on-demand is in use, and the user sees no prompt. What explains this?

Choose the single best answer.

A.The group password is stored in the destination route
B.The session can fall through to the unauthenticated rule
C.HTTPS can never trigger an authentication workflow
D.The remote server must be down

Show the answer and explanation

✓ Correct answer

The session can fall through to the unauthenticated rule

Default implicitly behavior can use the later unauthenticated permit. No prompt does not establish server failure or impossibility of HTTPS authentication; routes do not store group passwords.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.