StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Public cloud and FortiGate CNF

Practice question 89 of 440 · hard

A CNF instance and endpoint are active, but inter-VPC traffic takes a route that bypasses the inspection VPC. What change addresses the security gap?

Choose the single best answer.

  1. A.Select a stronger IPS signature while leaving routes unchanged
  2. B.Increase endpoint capacity while keeping the bypassing transit routes
  3. C.Associate a different policy set while leaving traffic outside every endpoint
  4. D.Correct the transit and route design to insert inspection
Show the answer and explanation

✓ Correct answer

  • Correct the transit and route design to insert inspection

Correct the route design to insert inspection. Capacity and stronger policy/signatures cannot inspect traffic routed around the service.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.