StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Initial configuration

Practice question 6 of 440 · medium

A junior engineer changes a port role from LAN to WAN and expects existing unwanted transit traffic to stop. What should actually be used to control that traffic?

Choose the single best answer.

  1. A.An interface role plus a static route without any forwarding restrictions
  2. B.Only a web-filter profile, leaving unrelated non-web traffic allowed
  3. C.An appropriate forwarding firewall policy
  4. D.Only a local-in policy for packets addressed to FortiGate
Show the answer and explanation

✓ Correct answer

  • An appropriate forwarding firewall policy

Forwarding policies control transit permissions. An interface role and route do not authorize or block the selected traffic; web filtering covers its inspected scope, and local-in policies govern traffic addressed to FortiGate.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.