View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam

NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #2 Discussion

Comment Image Comment Image Comment Image

You must update a firewall policy to block multiple websites within the subnet 172.165.58.0/24. What must you do to block these addresses efficiently? (Choose one answer)

  • A. Create a URL filter and apply the web filter profile to the firewall policy.
  • B. Create an IP address external connector and apply it to the destination field of the firewall policy.
  • C. Create an application sensor and apply the application control profile to the firewall policy.
  • D. Create an Internet Service Database (ISDB) group and apply it to the destination field of the firewall policy.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (5 votes) 62.5%
Answer: A (2 votes) 25%
Answer: D (1 vote) 12.5%

Community Explanations & Comments (8)

Brave-Dumps.com Admin 1 year ago
Selected: B
EFW 7.6 study guide page 258
Mike 10 months ago
Selected: A
EFW 7.6 study guide page 171/172
B is wrong because you would need a webserver hosting a textfile including all the websites you want to block.
Way too much work to just block a few websites
Podb 10 months ago
Selected: D
B - url base on domain or URL -- wrong answer
A - extermal conenctor for dynamic ex. IP -- wrong answer

D correct
Adam 9 months ago
Selected: B
If the question means blocking these websites within that public IP subnet based on requested Host/SNI/CN, then it should be A

If the question means blocking these websites within that public IP subnet based on destination public IP address in the packet regardless of Host/SNI/CN, then it should be B (even if it's not needed, and it can be done by simple address group object locally on FortiGate)

C is wrong as application control can't help with filtering domain or IP

D is wrong because we can't create ISDB group locally as ISDBs are created and maintained by FortiGuard
Jair Perez 7 months ago
Selected: B
The question asks for do it efficiently.
We don't know hoy many URL's exists on that subnet.
It's better and more scalable to create an external connector with an IP address threate feed.
zineeddine Mohamed 7 months ago
Selected: B
B is correct
Anonymous User 6 months ago
Selected: A
I feel the answer is A as because we need to clock multiple websites with a subnet. Page 258 External Connector for External Feed. In this it will synch all the website and we will not have any controll.
Anonymous User 3 months ago
Selected: B
EFW 7.6 study guide page 258