NSE4_FGT-7.0 · Question #10
(Addicting Games). Based on this configuration, which statement is true?
The correct answer is A. Addicting.Games is allowed based on the Application Overrides configuration. Based on the configuration, Addicting.Games is allowed because application overrides take precedence over general category-based blocking rules in FortiGate's application control profiles.
Question
(Addicting Games). Based on this configuration, which statement is true?
Exhibit
Options
- AAddicting.Games is allowed based on the Application Overrides configuration.
- BAddicting.Games is blocked on the Filter Overrides configuration.
- CAddicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
- DAddcting.Games is allowed based on the Categories configuration.
How the community answered
(24 responses)- A71% (17)
- B4% (1)
- C8% (2)
- D17% (4)
Why each option
Based on the configuration, Addicting.Games is allowed because application overrides take precedence over general category-based blocking rules in FortiGate's application control profiles.
In FortiGate's application control, an Application Override explicitly defines the action for a specific application, such as Addicting.Games, and this override takes precedence over any broader category-based actions, thus allowing the application.
If Addicting.Games were blocked by Filter Overrides, the correct statement would not be that it is allowed based on Application Overrides.
Setting the Filter Overrides action to Exempt is one way to allow, but the statement indicates that 'Application Overrides' are the direct reason for it being allowed.
While Categories are used for application control, Application Overrides are more specific and take precedence, meaning it is not solely allowed by Categories if an override exists.
Concept tested: FortiGate Application Control - Overrides precedence
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/368846/application-control
Topics
Community Discussion
No community discussion yet for this question.