StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 105 of 440 · easy

A general LAN-to-WAN permit appears before an overlapping contractor restriction. New contractor sessions use the general permit. Which change directly makes the restriction effective?

Choose the single best answer.

  1. A.Add a destination route with a lower distance
  2. B.Move the contractor restriction above the general permit
  3. C.Change the contractor policy ID to a smaller number
  4. D.Enable session-start logging on the general permit
Show the answer and explanation

✓ Correct answer

  • Move the contractor restriction above the general permit

Sequence determines ordinary first match, so the specific restriction must precede the broad permit. Route distance changes path selection; renaming an ID and logging do not change evaluation order.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.