StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall policies

Practice question 127 of 440 · medium

A forward traffic log explicitly shows action=accept, sent bytes, and zero received bytes. Which conclusion is justified by that record alone?

Choose the single best answer.

  1. A.The remote application completed successfully
  2. B.The logged session was permitted, but the return path still needs investigation
  3. C.No packet could have entered FortiGate
  4. D.The matching policy must have been DENY
Show the answer and explanation

✓ Correct answer

  • The logged session was permitted, but the return path still needs investigation

Allowed transmission is not end-to-end success. Zero receive evidence warrants return/server investigation; it does not prove ingress never happened or that an ACCEPT record was DENY.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.