A workload firewall requirement includes inspecting traffic content and detecting lateral attacks. Which two statements should guide design? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.An allow policy inspects traffic that routes around the firewall
B.Public-cloud hosting eliminates vulnerable application risks
C.North-south internet filtering alone proves every inter-workload path is covered
D.Native security groups do not automatically replace every content-inspection capability
E.East-west routes must actually pass the intended inspection path

Show the answer and explanation

✓ Correct answers

Native security groups do not automatically replace every content-inspection capability
East-west routes must actually pass the intended inspection path

Native controls and network inspection have different capabilities, and east-west steering is required for lateral traffic. Policies cannot inspect bypassed packets; hosting and north-south protection do not prove workload/east-west coverage.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.