nerdexam
FortinetFortinet

NSE4 · Question #403

NSE4 Question #403: Real Exam Question with Answer & Explanation

The correct answer is C: The category action was set to warning.. The log message indicates that the traffic was allowed to pass through the FortiGate, and this occurred because the URL's category had a warning action enabled.

Submitted by tyler.j· Apr 18, 2026Security Profiles and Content Inspection

Question

Examine the following log message attributes and select two correct statements from the list below. (Choose two.) status="passthrough" msg="URL belongs to a category with warnings enabled"

Options

  • AThe traffic was blocked.
  • BThe user failed authentication.
  • CThe category action was set to warning.
  • DThe website was allowed

Explanation

The log message indicates that the traffic was allowed to pass through the FortiGate, and this occurred because the URL's category had a warning action enabled.

Common mistakes.

  • A. The status="passthrough" attribute explicitly indicates that the traffic was allowed, not blocked.
  • B. This log message relates to web filtering and category actions, not user authentication status or failure.

Concept tested. FortiGate web filtering log interpretation

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/60838/web-filter

Topics

#Log interpretation#Web filtering#Security profiles#Policy actions

Community Discussion

No community discussion yet for this question.

Full NSE4 PracticeBrowse All NSE4 Questions