Which policy will be highlighted, based on the input criteria?

Refer to the exhibits.

The exhibits show the firewall policies and the objects used in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?
A . Policy with ID 4.
B . Policy with ID 5.
C . Policies with ID 2 and 3.
D . Policy with ID 1.

Answer: B

Explanation:

Policy with ID 5.

It’s coming from port 3 – hits Facebook-Web (Application) from the screenshot it show that it allows http and https traffic (80, 443).

There are 3 rules related to port3

and two rules source LOCAL_CLIENT

this would leave us with Rule 1 & 5

Rule one Service is = ULL_UDP

Rule five = Internet Services

Destination port we are looking for is 443 (usually this is TCP)

So it had to be PID5

We are looking for a policy that will allow or deny traffic from the source interface Port3 and source IP address 10.1.1.10 (LOCAL_CLIENT) to facebook.com TCP port 443 (HTTPS). There are only two policies that will match this traffic, policy ID 2 and 5. In FortiGate, firewall policies are evaluated from top to bottom. This means that the first policy that matches the traffic is applied, and subsequent policies are not evaluated. Based on the Policy Lookup criteria, Policy ID 5 will be highlighted.