StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 106 of 440 · medium

A policy permits source subnet Finance and requires group Finance-Users. A user outside that subnet has valid membership and credentials. Why does this policy not match?

Choose the single best answer.

  1. A.The source address and group requirements both must match
  2. B.The two conditions are alternatives
  3. C.Remote authentication overrides source restrictions
  4. D.The policy requires membership in every address object
Show the answer and explanation

✓ Correct answer

  • The source address and group requirements both must match

Different match categories combine with AND. Group membership does not waive the source address condition; multiple objects within a field usually use OR, not intersection of all subnets.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.