Which two web filtering inspection modes inspect the full URL? (Choose two.)

DNS-based web filtering inspects only DNS queries, not the full HTTP/HTTPS URL. It blocks access to malicious domains before the connection is established based on the domain name resolved.

Proxy-based web filtering operates at the application layer, acting as an intermediary to fully inspect HTTP/HTTPS traffic, including the entire URL, before forwarding it to the client. This deep inspection allows for detailed URL pattern matching and category enforcement.

Flow-based web filtering inspects traffic as it passes through the FortiGate, but it can still perform deep packet inspection for web traffic (HTTP/HTTPS) to analyze the full URL and apply web filtering policies. While not a full proxy, it is capable of full URL inspection for standard web protocols.

URL-based is not a standard inspection mode in the context of FortiGate web filtering; rather, it describes the object or criteria being filtered, which can be applied within proxy or flow modes.