NSE4 · Question #278
Which of the following statements are correct regarding URL Filtering on the FortiGate unit? (Select all that apply.)
The correct answer is A. The allowed actions for URL Filtering include Allow, Block and Exempt. C. The FortiGate unit can filter URLs based on patterns using text and regular expressions. FortiGate URL Filtering allows actions like Allow, Block, and Exempt, and it supports filtering URLs based on patterns using text and regular expressions.
Question
Which of the following statements are correct regarding URL Filtering on the FortiGate unit? (Select all that apply.)
Options
- AThe allowed actions for URL Filtering include Allow, Block and Exempt.
- BThe allowed actions for URL Filtering are Allow and Block.
- CThe FortiGate unit can filter URLs based on patterns using text and regular expressions.
- DAny URL accessible by a web browser can be blocked using URL Filtering.
- EMultiple URL Filter lists can be added to a single protection profile.
How the community answered
(19 responses)- A95% (18)
- D5% (1)
Why each option
FortiGate URL Filtering allows actions like Allow, Block, and Exempt, and it supports filtering URLs based on patterns using text and regular expressions.
FortiGate URL Filtering offers actions such as 'Allow' (permit access), 'Block' (deny access), and 'Exempt' (allow access while bypassing other security checks), among others, providing flexible control over web traffic.
The statement is incorrect because 'Exempt' (or similar bypass/monitor actions) is also a valid action in FortiGate URL filtering, not just 'Allow' and 'Block'.
FortiGate's URL Filtering capabilities include the ability to define custom URL patterns, supporting both simple text matching and advanced regular expressions for precise control over blocked or allowed URLs.
While powerful, FortiGate URL Filtering cannot block 'any' URL universally, especially for HTTPS traffic without SSL inspection, and its capabilities are limited to what can be derived from the URL itself, not dynamic content within a page.
A single protection profile typically refers to a single URL Filter profile configuration, not multiple distinct URL filter lists simultaneously applied within that single profile.
Concept tested: FortiGate URL filtering features and actions
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/501728/web-filter-profiles
Topics
Community Discussion
No community discussion yet for this question.