nerdexam
Fortinet

NSE4_FGT-7.0 · Question #107

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to…

The correct answer is A. Implement a web filter category override for the specified website. To effectively allow specific team members access to a website while blocking others, implementing a web filter category override for that specified website is the most effective solution.

Security Profiles

Question

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

Options

  • AImplement a web filter category override for the specified website.
  • BImplement web filter authentication for the specified website
  • CImplement web filter quotas for the specified website.
  • DImplement DNS filter for the specified website.

How the community answered

(16 responses)
  • A
    81% (13)
  • B
    6% (1)
  • D
    13% (2)

Why each option

To effectively allow specific team members access to a website while blocking others, implementing a web filter category override for that specified website is the most effective solution.

AImplement a web filter category override for the specified website.Correct

A web filter category override allows an administrator to reclassify a specific URL, which can then be used in a web filter profile applied to a firewall policy, enabling different access rules for different user groups or individual users. By creating a custom category or overriding an existing one, specific policies can be crafted to permit access for designated team members while blocking it for others.

BImplement web filter authentication for the specified website

Web filter authentication requires users to authenticate before accessing a site but does not directly implement differential access for specified users versus others; it's more for identification and logging.

CImplement web filter quotas for the specified website.

Web filter quotas limit the amount of time or bandwidth users can spend on a site, which does not address the requirement of allowing some users access while blocking others entirely.

DImplement DNS filter for the specified website.

A DNS filter blocks access at the DNS resolution level for everyone affected by the policy; it does not easily support allowing specific users while blocking others from the same website.

Concept tested: Web filter category overrides for granular access

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52002/category-overrides

Topics

#Web filter#Category override#Granular access control

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice