NSE4 · Question #553
Examine this PAC file configuration. Which of the following statements are true? (Choose two.)
The correct answer is A. Browsers can be configured to retrieve this PAC file from the FortiGate. D. Any web request fortinet.com is allowed to bypass the proxy. Browsers can be configured to retrieve PAC files directly from the FortiGate, and such PAC files often include rules to bypass the proxy for specific trusted domains like fortinet.com.
Question
Examine this PAC file configuration. Which of the following statements are true? (Choose two.)
Exhibit
Options
- ABrowsers can be configured to retrieve this PAC file from the FortiGate.
- BAny web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
- CAll requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through
- DAny web request fortinet.com is allowed to bypass the proxy.
How the community answered
(26 responses)- A96% (25)
- C4% (1)
Why each option
Browsers can be configured to retrieve PAC files directly from the FortiGate, and such PAC files often include rules to bypass the proxy for specific trusted domains like fortinet.com.
FortiGate devices can host and serve PAC files, allowing client browsers to be configured to automatically discover and retrieve the proxy configuration script directly from the FortiGate device itself.
Without the specific PAC file configuration, it cannot be definitively confirmed that a bypass rule for the 172.25.120.0/24 subnet is present or active.
This statement makes a broad assumption that all other requests must go through the proxy, but the specific wording and the implication of only those two bypasses cannot be guaranteed without the full PAC file script.
A common configuration within a PAC file includes rules to send traffic for specific trusted domains, such as 'fortinet.com', directly without routing it through the proxy server, often utilizing the 'DIRECT' return value.
Concept tested: Web Proxy Auto-Configuration (PAC) file functions
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-cookbook/241775/pac-file
Topics
Community Discussion
No community discussion yet for this question.
