View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #80 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibits. The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming? (Choose one answer)

  • A. Apple FaceTime will be allowed, based on the Video/Audio category configuration.
  • B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.
  • C. Apple FaceTime will be allowed, based on the Apple filter configuration.
  • D. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (11 votes) 52.38%
Answer: C (10 votes) 47.62%

Community Explanations & Comments (21)

Mahboab Ali Ghaleb 1 year ago
Selected: C
said “only a few calls originating or incoming.”
A few calls would likely not exceed the Excessive-Bandwidth threshold → so that filter wouldn’t trigger a block in this scenario.
Lokesh Kumar Verma 1 year ago
Selected: C
Could you please review, answer looks like "C"
MOHAMED IBRAHIM ELHADI AHMED 1 year ago
Selected: B
B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.
Based on the application sensor configuration and the filter details:
* B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration: The
"Excessive-Bandwidth" filter is set to block, which includes "FaceTime" under its application signature.
As a result, FaceTime will be blocked regardless of the "Apple" filter configuration because the
"Excessive-Bandwidth" filter takes precedence due to its block action setting.
The other options are not correct:
MOHAMED IBRAHIM ELHADI AHMED 1 year ago
Selected: B
C. Is incorrect
* C. Apple FaceTime will be allowed, based on the Apple filter configuration: Although the Apple filter is set to monitor, the block action of the Excessive-Bandwidth filter will override this.
Sanjay Jairaj 1 year ago
Selected: C
Face-time is categorized as VOIP - So it should be allowed - in my opinion?
Sanjay Jairaj 1 year ago
Please ignore my previous comment Answer is B https://fortiguard.fortinet.com/appcontrol/24426 - Fortinet clearly marks FaceTime under Excessive-Bandwidth
George 1 year ago
Selected: B
B should be the correct answer
Sateesh 10 months ago
Selected: B
B is correct
Mehdi 9 months ago
Selected: B
The question specifies "only a few calls originating or incoming" (low bandwidth/volume). However, the Excessive-Bandwidth filter is a behaviour/category-based signature filter — it matches based on application signatures/properties associated with high-bandwidth usage patterns (VoIP/video streaming apps like FaceTime), not on real-time measured bandwidth consumption or thresholds
Hisham ALmajid 9 months ago
Yes Mehdi , and as you note the FaceTime application is considered regarding to the screenshot as VoIP Categories so A for sure False , C and D are already allowed in VoIP Cat. so they are False , remain B which should be the correct answer also for sure to your comment , but my question YouTube does have the same behaviour/category-based signature filter like FaceTime ? thanx
Hisham ALmajid 9 months ago
Yes Mehdi , and as you note the FaceTime application is considered regarding to the screenshot as VoIP Categories so A for sure False , C and D are already allowed in VoIP Cat. so they are False , remain B which should be the correct answer also for sure to your comment , but my question YouTube does have the same behaviour/category-based signature filter like FaceTime ? thanx
Hisham ALmajid 9 months ago
sorry for the duplicate
Anonymous User 7 months ago
Selected: B
Hi admin.Is the answer C or B ? .
abdulrahman 7 months ago
Selected: C
guys the answer is C the because filter overrides are processed before the behavior overrides in this question if there were no filter override for faceTime then it would be blocked.
Anonymous User 6 months ago
Selected: C
ans c
Anonymous User 6 months ago
Selected: C
C is correct
Anonymous User 6 months ago
Selected: C
@Brave-Dumps.com Admin please update the correct answer
JAVIER KAMANEL 6 months ago
Selected: B
B is the correct answer, Facetime will be blocked, facetime is part of the excessive bandwith filter and is block, even the apple vendor filter was configured, also is under the excessive bandwith one , and the override will check like the firwall policies , from top to bottom, what it will block the facetime call.
Anonymous User 6 months ago
Selected: B
(Sorry i deleted the first msg)
here is why i think it's B and not C
@Brave-Dumps.com Admin I think you should correct this , the right answer is B and not C since Facetime is considered as Excessive-Bandwidth in the FortiGuard official website https://fortiguard.fortinet.com/appcontrol/24426
and the fact that they said "If there are only a few originating or incoming" doesn't really mean the the call isn't too long which consume a lot of bandwidth
Ahmed El Hasseen El Tom El Shaikh Berair 3 months ago
Selected: B
80
AHMAD ALRAMADAN 1 month ago
Selected: C
is it C @admin ?
Anonymous User 4 weeks ago
Selected: C
Excessive-Bandwidth will not trigger due to only few calls were made so it will be allowed by filter override.
@Brave-Dumps.com Admin is this correct?
Anonymous User 3 weeks ago
Selected: C
It's c?
[email protected] 2 weeks ago
Selected: B
As per order of processing in Application & Filter Overrides from top to bottom. Excessive-Bandwidth action is set to Block and hence Apple Facetime is matched and blocked.

A is incorrect as Overrides are always evaluated before categories (Video/Audio categories).

C is incorrect as Apple filter set to Monitor is located at priority 2 and Apple Facetime traffic matches Excessive Bandwidth filter at Priority 1 and action is blocked.

D is wrong as changing the action on Apple Filter at priority 2 will not impact.
Ahmed Saeed Elsalkh 6 days ago
Selected: B
Priority