NSE4 Question #172: Real Exam Question with Answer & Explanation

Question

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides is NOT correct?

Options

• AA web filter profile may only have one user group defined as an override group.
• BA firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
• CWhen requesting an override, the matched user must belong to a user group for which the
• DOverrides can be allowed by the administrator for a specific period of time.

Explanation

The incorrect statement regarding web filtering overrides is that a web filter profile can only define one user group for override privileges, as multiple groups are supported.

Common mistakes.

• B. Firewall user groups are indeed used to grant override privileges for FortiGuard Web Filtering, allowing specific groups to bypass blocks.
• C. For an override to be successful, the user requesting it must authenticate and belong to a user group specifically configured with override permissions.
• D. FortiGate allows administrators to specify a duration or time limit for web filter overrides, after which they automatically expire.

Concept tested. FortiGate web filter override limitations

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526786/web-filter-overrides

No community discussion yet for this question.