StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 107 of 440 · medium

A fresh client connection matches all policy fields except dstintf. Routing selects wan2, but the policy names wan1. What should be investigated first?

Choose the single best answer.

  1. A.Reorder the same wan1 policy above other wan1 policies
  2. B.Enable SNAT on the wan1 policy without changing its egress match
  3. C.Change the destination service to ALL without changing dstintf
  4. D.Check why routing chose wan2 and whether a permit covers that egress
Show the answer and explanation

✓ Correct answer

  • Check why routing chose wan2 and whether a permit covers that egress

The selected egress must match dstintf. Reordering the same mismatched policy, enabling SNAT, or widening its service does not make wan1 match a packet routed through wan2.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.