StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · IPsec VPNs

Practice question 406 of 440 · medium

Which accepting policy authorizes a new connection initiated by a local LAN host toward the remote protected subnet?

Choose the single best answer.

  1. A.Only the reverse tunnel-to-LAN policy.
  2. B.A policy allowing HTTPS to the FortiGate management IP only.
  3. C.A web-filter category override without a forward policy.
  4. D.LAN to the route-based tunnel interface, with matching addresses and service.
Show the answer and explanation

✓ Correct answer

  • LAN to the route-based tunnel interface, with matching addresses and service.

Local initiation needs permission from the LAN ingress to the selected tunnel egress. A reverse initiation policy, local management access or category classification is not that forward authorization. Return packets for the accepted session use state.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.