nerdexam
Fortinet

NSE4_FGT_AD-7.6 · Question #50

Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. Which two factors can you observe from these configurations?…

The correct answer is A. YouTube search is allowed based on the Google Application and Filter override settings. C. Facebook access is allowed but you cannot play Facebook videos based on Video/Audio category filter settings. Facebook belongs to the Social Media application category, which is set to Block in the application sensor. Therefore, any Facebook application traffic is blocked by category. YouTube Search may fall under Google services or General Interest depending on how traffic is parsed…

Security Profiles

Question

Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. Which two factors can you observe from these configurations? (Choose two.)

Options

  • AYouTube search is allowed based on the Google Application and Filter override settings.
  • BYouTube access is blocked based on Excessive-Bandwidth Application and Filter override settings.
  • CFacebook access is allowed but you cannot play Facebook videos based on Video/Audio category filter settings.
  • DFacebook access is blocked based on the category filter settings.

How the community answered

(50 responses)
  • A
    78% (39)
  • B
    8% (4)
  • D
    14% (7)

Explanation

Facebook belongs to the Social Media application category, which is set to Block in the application sensor. Therefore, any Facebook application traffic is blocked by category. YouTube Search may fall under Google services or General Interest depending on how traffic is parsed (especially with SSL deep inspection). The Google application override is set to Monitor, which means traffic is allowed, just logged. The Video/Audio category (which includes YouTube video playback) is blocked, but this does not block YouTube Search, which is just browsing and searching on the site, is not blocked by the Video/Audio category unless the actual video stream starts.

Topics

#application sensor#filter override#application control#traffic policy

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT_AD-7.6 Practice