Free FCSS-EFW-AD-7-6 Fortinet FCSS-EFW-AD-7-6 Practice Test Question - Page 3

Free FCSS-EFW-AD-7-6 – Fortinet FCSS-EFW-AD-7-6 Practice Test Question

Loading demo links...

Showing 7–7 of 7 questions

Question 7 (Topic 1)

In which two ways does FortiGate utlize the Internet Service Database (ISDB) within firewall policies and SD-WAN rules? (Choose two.)

Select an option, then click Submit answer.

○ The ISDB works in proxy mode, allowing the analysis of packets in layers 3 and 4 of the OSI model.
○ The ISDB blocks the IP addresses and ports of an application predefined by FortiGuard.
○ The ISDB limits access by URL and domain.
○ FortiGate has a predefined list of all IP addresses and ports for specific applications downloaded from FortiGuard.

Reference / correct answer:

FortiGate has a predefined list of all IP addresses and ports for specific applications downloaded from FortiGuard.

Most accepted answer: D. FortiGate has a predefined list of all IP addresses and ports for specific applications downloaded from FortiGuard.

Community votes: B=4, D=5

Selected Answer: D Just D seems to be correct. B: The ISDB itself does not block anything. A policy that uses the ISDB *may* be used to block applications. I wonder, if there is really "choose 2" in the real exam. upvoted 1 times

Selected Answer: BD ISDB is not a proxy-mode feature because it does not inspect or terminate the application session like a proxy-based security profile would. ISDB is mainly a traffic-matching database. FortiGate uses it to identify traffic based on FortiGuard-maintained information such as: Destination IP ranges Protocol Port Internet service/application category, for example Microsoft 365, Zoom, AWS, Google, etc upvoted 1 times

Selected Answer: BD b and d upvoted 1 times

Selected Answer: BD Enterprise Firewall 7.6 Administrator Study Guide, páginas 172, 173 upvoted 1 times

Selected Answer: BD B & D as detailed on pages 172 and 173 in the Enterprise Firewall Admin 7.6 study guide. upvoted 1 times