Exam FCP_WCS_AD-7.4 Topic 2 Question 11 Discussion

Actual exam question for Fortinet's FCP_WCS_AD-7.4 exam
Question #: 11
Topic #: 2
A customer has deployed FortiGate Cloud-Native Firewall (CNF).
Which two statements are correct about policy sets? (Choose two.)

Suggested Answer: A,C Vote an answer

Implicit Deny Rule:
Similar to traditional firewall rule sets, FortiGate Cloud-Native Firewall (CNF) includes an implicit deny rule at the bottom of each policy set. This means any traffic that does not match an existing rule in the policy set is automatically denied (Option A).
Policy Set Creation:
When a new CNF instance is deployed, a new policy set is created specifically for that instance. This ensures that each CNF instance can have a tailored set of security policies based on the specific needs of the deployment (Option C).
Other Options Analysis:
Option B is incorrect because policy sets do not require manual synchronization; they are applied automatically once configured.
Option D is incorrect as a single CNF instance operates with a single policy set at a time.
Reference:
FortiGate CNF Documentation: FortiGate CNF
Firewall Policy Best Practices: Fortinet Policies

by Harriet at Oct 15, 2026, 12:45 PM

Limited Time Offer

15%

Off

Get Premium FCP_WCS_AD-7.4 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10