FCP Security Policy Management & Compliance 4

Question 1

A FortiGate policy is configured with action 'accept' but traffic is still being blocked. After checking all explicit deny rules, what should the administrator investigate next?

Accepted Answer

Policy order—a higher-priority deny rule may match first

Answer

FortiGate evaluates policies top-to-bottom; a deny rule earlier in the list that also matches the traffic will take effect before the accept rule is reached.

Question 2

Which security compliance framework requires organizations to maintain a formal risk management program, which FortiGate's Security Rating and FortiAnalyzer reports help document?

Accepted Answer

NIST CSF Identify/Protect functions

Answer

NIST CSF's Identify and Protect functions require risk assessments and security controls documentation, which Security Rating scores and FortiAnalyzer reports provide evidence for.

Question 3

An administrator wants to automatically quarantine a FortiClient endpoint that fails a posture check. Which integration achieves this?

Accepted Answer

FortiClient EMS with compliance enforcement and quarantine VLAN

Answer

FortiClient EMS enforces endpoint compliance policies and can place non-compliant endpoints into a quarantine VLAN until they meet posture requirements.

Question 4

Which FortiGate feature allows writing custom traffic-matching criteria using Boolean logic for scenarios where standard policy fields are insufficient?

Accepted Answer

FortiGate scripting with custom match conditions via CLI

Answer

FortiGate CLI scripting and custom match conditions allow administrators to craft complex Boolean logic for traffic selection beyond standard GUI policy fields.

Question 5

A SOC manager needs to demonstrate that security policies are enforced 24/7. Which FortiAnalyzer report type provides continuous policy compliance evidence?

Accepted Answer

Traffic summary reports with policy hit counts over time

Answer

FortiAnalyzer traffic summary reports showing policy hit counts over time demonstrate that security policies are actively enforcing traffic continuously.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Security Policy Management & Compliance 4