View all questions & answers for the NSE 7 - Secure Networking 7.6 Architect Exam Materials exam

NSE 7 - Secure Networking 7.6 Architect Exam Materials - Question #7 Discussion

Comment Image Comment Image Comment Image

While troubleshooting a FortiGate web filter issue, users report that they cannot access any websites, even though those sites are not explicitly blocked by any web filter profiles that are applied to firewall policies. What are the three most likely reasons for this behavior? (Choose three answers)

  • A. The SSL/TLS deep inspection was configured but the browsers do not have the FortiGate certificate installed.
  • B. The webfilter-force-off setting has been enabled under config system fortiguard.
  • C. The web filter cache has been cleared causing all websites to take longer to be rated.
  • D. The DNS server is unreachable, preventing URL resolution.
  • E. The FortiGuard Web Filtering license has expired, causing FortiGate to apply the default block action.
Correct Answer: A,D,E

Brave-Dump Community Votes

Answer: A, D, E (3 votes) 75%
Answer: C, D, E (1 vote) 25%

Community Explanations & Comments (4)

Anonymous User 3 months ago
Selected: A, D, E
B should be wrong:
https://community.fortinet.com/fortigate-3/technical-tip-disable-fortiguard-services-globally-196898
set webfilter-force-off enable: This command forces Web Filtering to be turned off, bypassing any Web Filtering services provided by FortiGuard.
Anonymous User 3 weeks ago
Selected: A, D, E
A,D,E
Anonymous User 1 week ago
Selected: C, D, E
C not A
Kurt Richter 1 day ago
Selected: A, D, E
B is clearly incorrect. webfilter-force-off globally turns off the web-filtering service on the Fortigate, therefore NOTHING will be blocked by the web-filtering service as categorization, domain blocking, web content scanning are all disabled.