StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Fortinet Single Sign-On

Practice question 205 of 440 · medium

The collector reports the correct user/IP/groups and the FortiGate mapping agrees, but only SSH is denied by a policy allowing HTTPS. What is the strongest next check?

Choose the single best answer.

  1. A.Reinstall every DC agent
  2. B.Flush all production logons
  3. C.The firewall policy service condition
  4. D.Replace the shared secret immediately
Show the answer and explanation

✓ Correct answer

  • The firewall policy service condition

Correct identity does not waive service matching. SSH does not satisfy HTTPS; rebuilding the collection chain or clearing all users ignores the confirmed working stages.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.