What are the two available Inspection Modes? - Answer Flow-based and Proxy-based
Where do you configure the Inspection Mode? - Answer Within the firewall policy (Policy & Objects > Firewall Policy)
What are the advantages of Flow-based mode? - Answer 1. The user sees faster respon...
Fortinet NSE 4 (Security) - 07. Web
Filtering Prep Exam Questions Fully
Solved.
What are the two available Inspection Modes? - Answer Flow-based and Proxy-based
Where do you configure the Inspection Mode? - Answer Within the firewall policy (Policy & Objects >
Firewall Policy)
What are the advantages of Flow-based mode? - Answer 1. The user sees faster response time for
HTTP requests compared to Proxy-based
2. There is less chance of a time-out error because of the server at the other end responding slowly
What are the disadvantages of Flow-based mode? - Answer 1. A number of security features that are
available in Proxy-based mode are not available in Flow-based mode
2. Fewer actions are available based on the categorization of the website by FortiGuard services
Between Flow-based and Proxy-based inspection, which is faster? - Answer Flow-based
Between Flow-based and Proxy-based inspection, which yields fewer false positives? - Answer Proxy-
based
What are the two available NGFW Modes? - Answer Profile-based and Policy-based
True/False? Regardless of the NGFW Mode, Antivirus configuration is always profile based. - Answer
True
If a firewall is configured in Profile-based NGFW Mode, which Inspection Modes are available? - Answer
Either Flow-based or Proxy-based
, If a firewall is configured in Policy-based NGFW Mode, which Inspection Modes are available? - Answer
Only Flow-based
Where is the NGFW Mode configured in the GUI? - Answer System > Settings
How does NGFW policy-based mode differ from profile-based mode?
A. Policy-based flow inspection supports web profile overrides
B. Policy-based flow inspection defines URL filters directly in the firewall policy - Answer B. Policy-based
flow inspection defines URL filters directly in the firewall policy
Which statement about proxy-based web filtering is true?
A. It requires more resources than flow-based
B. It transparently analyzes the TCP flow of the traffic - Answer B. It transparently analyzes the TCP flow
of the traffic
What does FortiGate look for to collect URL information and perform web filtering? - Answer The HTTP
GET request
When configuring a Web Filter profile, you can choose to use a feature set for flow-based or proxy-based
inspection modes. Which mode has the most available options? - Answer Proxy-based mode
If you configure a Proxy-based Web Filter, can you apply it to a Flow-based Firewall Policy? - Answer
No, it will not even appear as an option to select
For web category filtering, when using Proxy-based configuration mode, what actions are available? -
Answer Allow
Block
Monitor
Warning
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller TestSolver9. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.99. You're not tied to anything after your purchase.
