Free NSE4-FGT-AD-7-6 Fortinet NSE4-FGT-AD-7-6 Practice Test Question - Page 3

Question 7 (Topic 1)

Refer to the exhibit. Why did the FortiGate device drop the packet?

Select an option, then click Submit answer.

○ It matched the default implicit firewall policy.
○ It failed the RPF check.
○ It matched an explicitly configured firewall policy with the action DENY.
○ It cannot reach the next-hop IP.

Question 8 (Topic 1)

Refer to the exhibits. The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

Select an option, then click Submit answer.

○ Apple FaceTime will be allowed, based on the Video/Audio category configuration.
○ Apple FaceTime will be allowed, based on the Apple filter configuration.
○ Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.
○ Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

Reference / correct answer:

Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

Most accepted answer: D. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

Community votes: B=1, D=3

Selected Answer: D References * FortiOS 7.4.1 Administration Guide - Application Control and Filtering, page 978. * FortiOS 7.4.1 Administration Guide - Application Sensor Configuration, page 982. upvoted 2 times

Selected Answer: B B. Apple FaceTime will be allowed, based on the Apple filter configuration. Technical Explanation In the Aoplication Sensor, there are two configured Application and Filter Overrides: Excessive-Bandwidth → Block (Priority 1) Apple → Monitor (Priority 2) FaceTime belongs to the Apple vendor filter, and it may also match the Excessive-Bandwidth filter when bandwidth usage is high. However, the question states that there are only a few incoming or outgoing calls, meaning FaceTime is not consuming excessive bandwidth. FortiGate Evaluation Logic Since FaceTime is using low bandwidth, it does not match the Excessive-Bandwidth filter. It does match the Apple filter, whose action is Monitor. The Monitor action means the traffic is allowed and logged. upvoted 1 times

Selected Answer: D Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration. Step 1 (Priority 1 Overide): The first override in the list is the Excessive-Bandwidth filter. Looking at the "Application override configuration" exhibit, we can see that FaceTime is a member of this filter, and the configured action is Block. • The Result: Because the FortiGate finds a match at Priority 1, it immediately applies the Block action and stops processing further upvoted 2 times

Selected Answer: D n this specific context (as an application filter), the filter does not measure real-time traffic volume or wait for a user to hit a certain limit. If an application is on the "Excessive-Bandwidth" list and the filter's action is set to Block, that application is blocked from the first packet. upvoted 3 times

Free NSE4-FGT-AD-7-6 – Fortinet NSE4-FGT-AD-7-6 Practice Test Question