StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Fortinet Single Sign-On

Practice question 189 of 440 · medium

The collector lists a user, but the required Finance group is excluded by its group filter. Which outcome is plausible on FortiGate?

Choose the single best answer.

  1. A.The user can be known yet not satisfy the Finance policy group
  2. B.FortiGate can infer the excluded Finance membership from the username alone
  3. C.Adding Finance to the policy recreates the group information excluded by the collector
  4. D.An otherwise matching service bypasses the missing Finance membership
Show the answer and explanation

✓ Correct answer

  • The user can be known yet not satisfy the Finance policy group

A group filter limits delivered information. A known user can therefore lack the Finance group needed by the policy. A username, local policy reference or service match does not recreate that excluded group membership.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.