The output shows the IPS engine count as 0, indicating no active IPS engines are running. This typically means no firewall policy is referencing the IPS security profile, so the IPS profile is not being applied or triggered.

Certificate inspection is not deep ssl inspection hence no inspection of the packet would happen since it is encrypted.
If the https site is in exampted list then yes it is a valid reason.

According to the FortiOS 7.6 Firewall Policy administration documentation, the correct answers are A and B.
Analysis of Each Statement
A . A firewall policy ID identifies the order of policy execution in firewall policies.
Correct
In FortiOS, each firewall policy is assigned a policy ID, which is used internally to reference the policy.
Policies are evaluated top-down, and the policy ID reflects the relative order in which the policy exists in the policy table.
While the GUI shows policies by sequence, that sequence is tied to the policy ID ordering.
Fortinet documentation and study guides commonly describe the policy ID as identifying the policy's execution order.
Therefore, this statement is considered true in the context of FortiOS administration and certification exams.
B . A policy ID cannot be modified once a policy is created.
Correct
Once a firewall policy is created, its policy ID is fixed.
You can:
Move the policy up or down in the policy list
Edit the policy contents
But you cannot change the policy ID itself.
This is explicitly documented behavior in FortiOS.
C . You can create a policy in CLI with policy ID 0
Incorrect
Policy ID 0 is reserved by FortiOS.
In the CLI, using:
edit 0
does not create a policy with ID 0; instead, it tells FortiGate to automatically assign the next available policy ID.
A real firewall policy with ID 0 cannot exist.
D . It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.
Incorrect
In the GUI, policy IDs are assigned automatically.
In the CLI, administrators can use edit 0 to auto-generate a policy ID.
Therefore, manually specifying a policy ID is not mandatory.

NetAPI: Polls temporary sessions created on the DC when a user logs on or logs off and calls the NetSessionEnum function on Windows. It's faster than the WinSec and WMI methods; however, it can miss some logon events if a DC is under heavy system load. This is because sessions can be quickly created and purged form RAM, before the agent has a chance to poll and notify FG.

When FortiGuard servers are configured as DNS servers on FortiGate with default settings, the DNS queries are sent using the standard DNS protocol over UDP port 53.