An operator intentionally wants the matching firewall authentication requirement triggered instead of implicit unauthenticated fall-through. Which setting is relevant?

Choose the single best answer.

A.set strict-src-check enable
B.set nat enable
C.set auth-on-demand always
D.set logtraffic all

Show the answer and explanation

✓ Correct answer

set auth-on-demand always

auth-on-demand always changes that authentication behavior. Source validation, translation and traffic logging serve different functions. Check prerequisite access and policy design too.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.