StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 123 of 440 · medium

A debug record reports a forward-policy check failure at Policy 0 for a new session. Which next action is most useful?

Choose the single best answer.

  1. A.Assume the configured permit matched because its destination object looks correct.
  2. B.Change only the IP pool while leaving the unmatched policy fields unchanged.
  3. C.Reorder a policy with the wrong egress interface without checking the actual path.
  4. D.Compare the observed tuple and identity with the permit criteria.
Show the answer and explanation

✓ Correct answer

  • Compare the observed tuple and identity with the permit criteria.

Policy 0 in this forward context indicates unmatched authorization. Compare the actual ingress/egress, addresses, service and identity with the permit rules. One matching field is insufficient; a pool change or reordering a mismatched egress rule does not resolve the missing match.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.