nerdexam
Fortinet

NSE4 · Question #489

Which of the following statements is true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

The correct answer is B. Can contain a list of destinations that will be exempt from the use of any proxy. C. Can contain a list of URLs that will be exempted from the FortiGate web filtering inspection. A Proxy Auto-Configuration (PAC) file allows an Internet browser to dynamically select a proxy server or connect directly based on destination, effectively exempting certain destinations or URLs from proxy usage and related inspection.

Submitted by packet_pusher· Apr 18, 2026Security Profiles and Content Inspection

Question

Which of the following statements is true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

Options

  • AMore than one proxy is supported.
  • BCan contain a list of destinations that will be exempt from the use of any proxy.
  • CCan contain a list of URLs that will be exempted from the FortiGate web filtering inspection.
  • DCan contain a list of users that will be exempted from the use of any proxy.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    93% (28)
  • D
    3% (1)

Why each option

A Proxy Auto-Configuration (PAC) file allows an Internet browser to dynamically select a proxy server or connect directly based on destination, effectively exempting certain destinations or URLs from proxy usage and related inspection.

AMore than one proxy is supported.

While a PAC file can define logic to choose among multiple proxies, it typically directs a given request to one chosen proxy or directly, not actively using multiple proxies simultaneously for a single request.

BCan contain a list of destinations that will be exempt from the use of any proxy.Correct

A PAC file contains JavaScript logic that the browser executes to determine whether to use a proxy server or connect directly to a destination, enabling specific hosts, domains, or IP addresses to bypass proxy usage.

CCan contain a list of URLs that will be exempted from the FortiGate web filtering inspection.Correct

By instructing the browser to connect directly to certain URLs rather than through the FortiGate's explicit web proxy, a PAC file can effectively exempt that traffic from inspection performed by the FortiGate's explicit web filtering module.

DCan contain a list of users that will be exempted from the use of any proxy.

A PAC file's logic is based on destination URLs, hosts, or IP addresses, not on the authenticated user; user-specific proxy exemptions are managed by the proxy server, not the client-side PAC file.

Concept tested: Web Proxy Auto-Configuration (PAC) file functionality

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/501705/explicit-web-proxy

Topics

#PAC file#Web proxy#FortiGate web filtering#Proxy exemption

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice