View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam

NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #49 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. The FortiGuard security services on a FortiGate device is shown. You need to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile. Why is the web filter database version not visible on the GUI, like it is with the intrusion prevention system (IPS) definitions? (Choose one answer)

  • A. The web filter database is stored locally on FortiGate, but you must enable Web Filter in the Feature Visibility section to see the web filter database version.
  • B. The web filter database is accessible only after you add a web filter security profile in a firewall policy.
  • C. The web filter database is stored locally, but you must use the CLI command diagnose autoupdate versions to see the web filter database version.
  • D. The web filter database is not hosted on FortiGate; FortiGate queries FortiGuard or FortiManager for web filter ratings on demand.
Correct Answer: D

Brave-Dump Community Votes

Answer: D (2 votes) 100%

Community Explanations & Comments (2)

Adam 9 months ago
Selected: D
From Study Guide:
The web filter database isn't hosted locally on the firewall. FortiGate must query FortiGuard or FortiManager, which act as a FortiGuard Distribution Center (FDS) for rating lookups on-demand.
To view the web filter database that FortiGate uses to categorize a website, look at the cache of recent web filter lookups.
Anonymous User 6 months ago
Selected: D
Enterprise_Firewall_7.6_Administrator_Study_Guide page 172