Priya Dogra – Certification | Jobs | Internships
Related Articles
Firewalls quiz answers
These are the answers to the Firewalls lesson quiz in Fortinet’s free Getting Started in Cybersecurity course, with a short explanation for every question. Getting Started in Cybersecurity is one of the two course options (with Technical Introduction to Cybersecurity) that, together with Introduction to the Threat Landscape, earns the Fortinet Certified Fundamentals (FCF) in Cybersecurity certification.
Course at a glance
- Provider: Fortinet Training Institute
- Cost: Free
- Course: Getting Started in Cybersecurity (15 short lessons, each with a quiz)
- Best for: Sales and non-technical roles that need a high-level view of security technology
- Counts toward: FCF in Cybersecurity (valid 2 years)
- Official course: training.fortinet.com
- Answers reviewed: November 2026
Fortinet updates its question banks from time to time. If you see a question that isn’t listed here, leave a comment with the question and we’ll add it.
Quiz questions and answers
Question 1: Which type of firewall was the first generation of firewalls?
- Packet filter
- Application layer
- Next-generation firewall (NGFW)
- Stateful
Why: The first firewalls were packet filters.
Question 2: Complete the sentence: A packet filter firewall controls network traffic based on ___________.
- network addresses, protocols, and ports.
- the behavior of the network connections.
- filtering layers 2–7 of the OSI model.
- application behavior or characteristics.
Why: Packet filters allow or block traffic by network address, protocol and port.
Question 3: What was a limitation of first-generation firewalls?
- Granular policy capability made managing the firewall too complex
- Produced many false positives, thereby overwhelming IT security
- Opened random ports and used multiple connections
- Filtered only at Layer 3 of the OSI model
Why: Some applications opened random ports and used several connections, which simple packet filters couldn’t track safely.
Question 4: Which identifying feature differentiates an NGFW firewall from earlier types of firewalls?
- Filters by protocol
- Examines data in the packets
- Uses rule-based decision-making
- Monitors IP addresses and ports
Why: In the course, NGFWs are distinguished by rule-based decision-making that combines application, user and content information.
Question 5: In a UTM firewall, which component monitors protocols, such as FTP and HTTP?
- Protocol filter
- Transport layer filter
- Application layer filter
- Web filter
Why: In a UTM, the application layer filter watches application protocols such as FTP and HTTP.
Question 6: Which three elements does a stateful firewall track when determining whether to allow or deny a TCP/IP connection? (Choose three.)
- User behavior
- Source IP address
- Protocol in use
- Destination port
- Type of application connected to
Why: A stateful firewall tracks the source IP address, destination port and protocol for each connection.
Question 7: Which three traits are characteristics of a next generation firewall (NGFW)? (Choose three.)
- Inspects only unencrypted packets
- Controls network traffic based only on network address
- Can segment a network based on user, device, and application type
- Uses AI to enforce security policies
- Delivers high-performance inspection
Why: NGFWs segment by user, device and application, use AI to enforce policy and deliver high-performance inspection.
Questions from the older NSE 2 version of this lesson
Fortinet’s earlier NSE 2 course asked these questions on the same topic. They are kept here in case your quiz still shows them.
Question 1: Which type was the first generation of firewalls?
- Next-generation firewall (NGFW)
- Packet filter
- Stateful
- Application layer
Why: Packet filter firewalls were the first generation.
Question 2: Which two types of firewalls can block a connection based on application type? (Choose two.)
- Packet filter
- Next-generation firewall (NGFW)
- Application layer
- Second generation stateful
Why: Application-layer firewalls and NGFWs understand applications, so they can block connections by application type.
Question 3: Which firewall generation can you configure to allow a user to connect to Facebook, but not watch videos from that site?
- Next-generation firewall (NGFW)
- Stateful firewall
- Dynamic packet firewall
- Packet filter firewall
Why: Only an NGFW can control features inside an application, such as allowing Facebook but blocking its videos.
All Getting Started in Cybersecurity quiz answers
- Endpoint Monitoring quiz answers
- Firewalls (this page)
- Zero Trust Network Access (ZTNA) quiz answers
- Endpoint Hardening Techniques quiz answers
- Content Filters quiz answers
- SIEM quiz answers
- SOAR quiz answers
- Sandbox quiz answers
- Web Application Firewall (WAF) quiz answers
- SASE quiz answers
- Secure Email Gateway quiz answers
- Network Access Control (NAC) quiz answers
- Cloud Service Models quiz answers
- Wi-Fi quiz answers
- SD-WAN quiz answers
Frequently asked questions
Is Getting Started in Cybersecurity free?
Yes. It is free on the Fortinet Training Institute website; you only need a free account.
What is the difference between Getting Started and Technical Introduction to Cybersecurity?
Getting Started in Cybersecurity is a high-level course for sales and non-technical roles. Technical Introduction to Cybersecurity goes deeper and suits people heading into technical IT or security jobs. Either one, plus Introduction to the Threat Landscape, earns the FCF certification.
Did the old Fortinet NSE 2 course change?
Yes. Fortinet replaced the NSE 1–3 courses with the FCF curriculum. Many NSE 2 lesson topics now appear in Getting Started in Cybersecurity, which is why this page includes both the current and the older questions.
2 comments
Pingback: Fortinet SOAR Quiz Answers Explained | Priya Dogra
Pingback: Fortinet Network Access Control (NAC) Quiz Answers Explained | Priya Dogra