Exam NSE4_FGT-6.4 topic 1 question 25 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4

Question #: 25
Topic #: 1

Refer to the exhibit.

The exhibit contains a network diagram, firewall policies, and a firewall address object configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-user2. Remote-user2 is still able to access Webserver.
Which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

A. Disable match-vip in the Deny policy.
B. Set the Destination address as Deny_IP in the Allow-access policy.
C. Enable match-vip in the Deny policy.
D. Set the Destination address as Web_server in the Deny policy.

Show Suggested Answer

Suggested Answer: CD 🗳️

by darkMmve at April 22, 2021, 5:05 p.m.

Comments

Submit Cancel

Ishan_Dis

Highly Voted 3 years, 11 months ago

By default does not match vip in deny policy for destination all. So 2 options wehave 1. Enable match vip in the Deny policy. 2. Add destination as webserver in deny policy

upvoted 8 times

...