Courseiva

FORTINET-NSE123 Practice Question: Nse 2 Technical Introduction TO Fortinet Security

An administrator is setting up a FortiGate firewall and needs to define the security posture for traffic flowing from the internal network to the external Internet. Which object type should the administrator configure to enforce unified threat management features such as Antivirus, Web Filtering, and Intrusion Prevention on that traffic?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Security Profile

Security profiles (grouped under Security Profiles in FortiOS) are attached to firewall policies to apply UTM inspections like Antivirus, Web Filtering, and IPS. Interface addresses, zones, and schedules control routing and timing, not threat inspection.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Virtual Domain (VDOM)

    Why it's wrong here

    A VDOM is used to partition a single FortiGate into multiple virtual units, not to apply UTM inspection to a single traffic flow.

  • Security Profile

    Why this is correct

    Security profiles contain UTM inspection mechanisms such as Antivirus, Web Filtering, and IPS applied via firewall policies.

  • Interface Zone

    Why it's wrong here

    Interface zones group multiple physical or virtual interfaces together for unified policy application, but do not perform UTM inspection by themselves.

  • Firewall Schedule

    Why it's wrong here

    Firewall schedules define time-based constraints for policy enforcement, not content or threat inspection.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every FORTINET-NSE123 question from scratch — 296 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Fortinet exam blueprint

This FORTINET-NSE123 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FORTINET-NSE123 exam.