Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Professional: FortiGate / FortiOS 7.6 Administrator · Fortinet
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Very tricki question, the question is "which two changes can the administrator make to deny Webserver access for Remote-User2" , to achieve this question NO action is needed for the in place configuration, both A and D simply does not make sense, while B and C also achieve the result needed, so right answer is BC
... no actions is needed due to the order of policy
BC But what if you want the first policy to block all incoming traffic to all destinations, including the traffic destined to any VIPs?. This is useful if your network is under attack, and you want to temporarily block all incoming external traffic. You can do this by enabling match-vip on the first firewall policy. In case you want to block only traffic destined to one or more VIPs, you can reference the VIPs as thedestination address on the deny firewall policy