View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #44 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile. An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category. What are two solutions for satisfying the requirement? (Choose two answers)

  • A. Configure a static URL filter entry for download.com with Type and Action set to Wildcard and Block, respectively.
  • B. Configure a web override rating for download.com and select Malicious Websites as the subcategory.
  • C. Configure a separate firewall policy with action Deny and an FQDN address object for *.download.com as destination address.
  • D. Set the Freeware and Software Downloads category Action to Warning.
Correct Answer: A,B

Brave-Dump Community Votes

Answer: A, B (8 votes) 72.73%
Answer: A, C (3 votes) 27.27%

Community Explanations & Comments (11)

yutsu 11 months ago
Selected: A, C
Re-rating a domain into another category (Malicious Websites) does NOT work unless FortiGuard accepts the override (which is for lab/testing only).
Also, this would mis-categorize the site globally, not recommended or reliable.
mostafa abdelkreem 2 months ago
C could work but it is not a web filter profile solution , Additionally, FQDN-Based FW Policies wely on DNS and may not match all IPs associated to &.download .com (they can use CDN or load balancing) B satisfies all conditions
Thomas Pfaff 10 months ago
Selected: A, B
I had the same thought as the other commentor but I think the given answer is correct. See Fortinet documentation for B:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-Web-Rating-Overrides-for-specific/ta-p/193384
Anonymous User 9 months ago
Selected: A, C
admin what is it?
Anonymous User 8 months ago
Selected: A, B
A, B
Anonymous User 8 months ago
Selected: A, C
As our test in the real environment, the correct answer should be A & C
Anonymous User 7 months ago
Selected: A, B
What is the correct answer @admin?
Anonymous User 6 months ago
Selected: A, B
A/ granular filtering
B/ in the Web Filter profile config, Malicious Websites are blocked, and then in combination with override rating should work (page 274, 275 from study guide)
A/ and B/ are application layer filtering, so more precise, while option C/ is layer4 filtering.
check - https://community.fortinet.com/t5/Support-Forum/Problem-with-denying-FQDN/m-p/59083#M58993
Anonymous User 6 months ago
Selected: A, B
A,B
Anonymous User 6 months ago
Selected: A, B
A,B
Ahmed El Hasseen El Tom El Shaikh Berair 3 months ago
Selected: A, B
44
AHMAD ALRAMADAN 1 month ago
why please ?
[email protected] 2 weeks ago
Selected: A, B
A B
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-Web-Rating-Overrides-for-specific/ta-p/193384