nerdexam
Fortinet

NSE4 · Question #171

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are…

The correct answer is B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering. C. Authentication to allow the override is based on a user's membership in a user group. D. Overrides can be allowed by the administrator for a specific period of time. FortiGate web filtering overrides are configured for firewall user groups, require user authentication based on group membership, and can be set to expire after a specified duration.

Submitted by javi_es· Apr 18, 2026Security Profiles and Content Inspection

Question

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct? (Select all that apply.)

Options

  • AA protection profile may have only one user group defined as an override group.
  • BA firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  • CAuthentication to allow the override is based on a user's membership in a user group.
  • DOverrides can be allowed by the administrator for a specific period of time.

How the community answered

(30 responses)
  • A
    10% (3)
  • B
    90% (27)

Why each option

FortiGate web filtering overrides are configured for firewall user groups, require user authentication based on group membership, and can be set to expire after a specified duration.

AA protection profile may have only one user group defined as an override group.

A web filter profile can be configured to allow multiple user groups to perform overrides, not restrictively only one user group.

BA firewall user group can be used to provide override privileges for FortiGuard Web Filtering.Correct

FortiGate web filtering policies allow administrators to specify one or more firewall user groups that are permitted to override blocked website categories.

CAuthentication to allow the override is based on a user's membership in a user group.Correct

For a user to successfully override a web filter block, they must authenticate and be a member of a user group that has been granted override privileges in the web filter profile.

DOverrides can be allowed by the administrator for a specific period of time.Correct

Administrators can configure web filter override settings to enforce a time limit, after which the override permission automatically expires.

Concept tested: FortiGate web filter override configuration

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526786/web-filter-overrides

Topics

#Web Filtering#FortiGuard#User Authentication#Security Profiles

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice