StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 112 of 440 · medium

A custom service for a web server requires destination TCP 443 and source TCP 443. Normal browsers are denied. Which change is most appropriate?

Choose the single best answer.

  1. A.Remove the unintended source-port restriction
  2. B.Replace the service with an FQDN object
  3. C.Set the source port equal to the destination port
  4. D.Add a reverse policy for the SYN
Show the answer and explanation

✓ Correct answer

  • Remove the unintended source-port restriction

Clients normally use ephemeral source ports, so requiring source 443 rejects their requests. An address object does not fix a port condition; a reverse policy is unrelated to a forward SYN mismatch.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.