M18-02Vendor CLI · quiz
NGFW Zones & Policy
Next-gen firewalls (FortiGate, Palo Alto) think in zones and policies rather than line-by-line ACLs. Build the mental model that transfers across security vendors.
1
On a next-gen firewall, interfaces are grouped into what, and policies are written between them?
2
A policy should allow the DMZ web server to be reached from the internet but block the internet from reaching the internal LAN. This is an example of…
3
What typically happens to traffic that matches no explicit NGFW policy?
4
Beyond ports, what can an NGFW additionally match to identify traffic (a key 'next-gen' feature)?