StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 399 of 440 · medium

Both peers negotiate broad 0.0.0.0/0 traffic selectors. A protected workstation attempts a service denied by the accepting-policy design. What do the broad selectors imply?

Choose the single best answer.

  1. A.The WAN interface becomes a transparent bridge.
  2. B.Every remote address automatically becomes an administrator trusted host.
  3. C.The SA can potentially carry a broad traffic scope, but policy authorization still applies.
  4. D.The denied service must be accepted because selectors override firewall policies.
Show the answer and explanation

✓ Correct answer

  • The SA can potentially carry a broad traffic scope, but policy authorization still applies.

Selectors define SA carriage scope, not authorization. Broad selectors do not override policy, change operation mode or configure administrator source restrictions. Verify the actual forward policy.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.