StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 116 of 440 · medium

An applicable ACCEPT policy has a web-filter profile. Traffic logs show accepted session processing and a correlated security event shows a blocked category. Which interpretation is best?

Choose the single best answer.

  1. A.The two logs must concern different sessions
  2. B.The policy was implicitly denied before matching
  3. C.The security event proves the route was never selected
  4. D.Firewall authorization succeeded, then inspection blocked content
Show the answer and explanation

✓ Correct answer

  • Firewall authorization succeeded, then inspection blocked content

Authorization and content inspection are successive decisions. Correlated acceptance and a later profile block can coexist; acceptance does not guarantee every request or payload is allowed.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.