Fortinet FCP FortiGate Security Policies Quiz

1. In FortiGate, what is the purpose of the 'Schedule' field in a security policy?

To restrict when a policy is active

To define bandwidth allocation

To encrypt traffic automatically

To log all denied connections

2. In FortiGate, what is required to create a valid security policy?

Source, destination, service, action, and interfaces

Only source and destination addresses

Only action and schedule

Only service and port number

3. Which feature in FortiGate policies controls bandwidth usage?

Traffic Shaping

Port Forwarding

VPN Encryption

DNS Filtering

4. What does enabling 'SSL Inspection' in a FortiGate policy allow?

Deep inspection of encrypted HTTPS traffic

Blocking all SSL connections

Automatic SSL certificate generation

Disabling port 443 access

5. In FortiGate, how are policies with the same priority order evaluated?

The first matching policy in the list is applied

All matching policies are applied sequentially

The most restrictive policy is chosen

Policies are evaluated randomly

6. What is the purpose of the 'Incoming Interface' field in a FortiGate security policy?

Specifies which interface traffic enters from

Defines the outgoing port number

Sets the encryption algorithm

Determines user authentication method

7. Which of the following is a valid policy action in FortiGate?

Accept, Deny, or Reject

Allow, Block, or Quarantine

Permit, Deny, or Alert

Enable, Disable, or Monitor

8. In FortiGate, what does 'Invert Match' do for an address object in a policy?

Matches all traffic except from the specified address

Reverses the source and destination addresses

Encrypts traffic from that address

Prioritizes traffic from that address

9. What is the main advantage of using Address Groups in FortiGate policies?

Simplifies policy management by grouping multiple addresses

Increases network bandwidth

Enables automatic traffic encryption

Reduces firewall processing power

10. Which inspection mode performs deep packet inspection in FortiGate?

Flow-based inspection

Proxy-based inspection

Session-based inspection

Header-only inspection

11. What is the primary purpose of a security policy in FortiGate?

To define rules that allow or deny traffic between network interfaces

To monitor CPU and memory usage

To manage user authentication credentials

To schedule backup operations

12. What does NAT (Network Address Translation) do in a FortiGate security policy?

Translates source or destination IP addresses for traffic passing through

Encrypts traffic using IPsec protocol

Blocks all outbound traffic

Prioritizes traffic based on protocol type

13. Which policy evaluation order is used by FortiGate?

Top-to-bottom; first matching policy is applied

Bottom-to-top; last matching policy is applied

Random order for load balancing

Alphabetical order by policy name

14. In FortiGate, what is the purpose of Service Objects?

To define ports, protocols, and port ranges used in policies

To manage user account permissions

To configure backup schedules

To define firewall interface names

15. Which feature allows FortiGate to identify traffic by application rather than just port number?

Application Control

Port Forwarding

NAT Translation

VLAN Tagging

16. What is the function of Address Objects in FortiGate security policies?

To represent IP addresses, subnets, or groups of addresses for policy rules

To store user login credentials

To define VPN encryption parameters

To schedule policy updates automatically

17. In a FortiGate policy, what does 'Log Allowed Traffic' enable?

Recording of permitted connections for audit purposes

Automatic blocking of suspicious patterns

Real-time alerting to administrators

Encryption of all allowed traffic

18. Which of the following is NOT a standard action in a FortiGate security policy?

Accept

Deny

Encrypt

Reject

19. What does the 'Implicit Deny' rule mean in FortiGate security policies?

All traffic is denied unless explicitly allowed

All traffic is allowed unless explicitly denied

Traffic matching no policy is dropped silently

Encrypted traffic is automatically denied

20. In FortiGate, which component is evaluated first when processing a security policy?

Destination address

Source address

Service port

Application control filter