nerdexam
Fortinet

NSE4 · Question #8

Which statements are true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

The correct answer is C. The browser can automatically download it from a web server. D. Can include a list of destination IP subnets where the browser can connect directly to without. PAC files enable browsers to automatically download proxy configuration from a web server and can contain logic to direct traffic to specific proxies or allow direct connections based on destination subnets.

Submitted by mateo_ar· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Which statements are true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

Options

  • AOnly one proxy is supported.
  • BCan be manually imported to the browser.
  • CThe browser can automatically download it from a web server.
  • DCan include a list of destination IP subnets where the browser can connect directly to without

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    93% (25)

Why each option

PAC files enable browsers to automatically download proxy configuration from a web server and can contain logic to direct traffic to specific proxies or allow direct connections based on destination subnets.

AOnly one proxy is supported.

PAC files are designed to support complex logic, including the ability to specify multiple proxy servers for redundancy or load balancing, not just a single proxy.

BCan be manually imported to the browser.

While some browsers might offer an option to specify a local PAC file, the common and intended method for PAC file deployment is for the browser to fetch it from a web server via a URL, rather than a manual import process.

CThe browser can automatically download it from a web server.Correct

Internet browsers are configured to retrieve a PAC file from a specified URL, allowing them to automatically download and apply the proxy configuration rules provided in the script.

DCan include a list of destination IP subnets where the browser can connect directly to withoutCorrect

A PAC file contains a JavaScript function that can evaluate destination IP addresses or hostnames, allowing it to define which traffic should bypass the proxy and connect directly to certain destination subnets.

Concept tested: PAC file functionality

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/606977/explicit-web-proxy-with-pac

Topics

#PAC file#Web Proxy Auto-Discovery#Browser Proxy Configuration#Explicit Proxy

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice