nerdexam
Fortinet

NSE4_FGT-7.0 · Question #163

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support…

The correct answer is A. Implement a web filter category override for the specified website. To allow specific team members access to a website while blocking it for others, implementing a web filter category override for the website is the most effective solution.

Security Profiles

Question

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?

Options

  • AImplement a web filter category override for the specified website
  • BImplement a DNS filter for the specified website.
  • CImplement web filter quotas for the specified website
  • DImplement web filter authentication for the specified website.

How the community answered

(30 responses)
  • A
    83% (25)
  • B
    10% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

To allow specific team members access to a website while blocking it for others, implementing a web filter category override for the website is the most effective solution.

AImplement a web filter category override for the specified websiteCorrect

Implementing a web filter category override for the specified website allows the administrator to reclassify the site into a custom category. This custom category can then be explicitly allowed for the group of users who need access and blocked for the majority, providing precise, user-group-based control.

BImplement a DNS filter for the specified website.

A DNS filter blocks or allows access to a website at the DNS resolution stage, which is generally less granular for controlling access based on specific user groups for web content, making it less effective for this precise scenario.

CImplement web filter quotas for the specified website

Web filter quotas limit the amount of time or bandwidth users can spend on a site; they do not provide a mechanism to completely block access for some users while allowing it for others.

DImplement web filter authentication for the specified website.

Web filter authentication would require users to authenticate, but it does not inherently block access for the majority while allowing it for some without additional policy rules that would likely leverage web filter categories or user groups anyway.

Concept tested: FortiGate web filter category overrides for user control

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339401/web-rating-overrides

Topics

#web filtering#category override#user groups#granular access control

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice