NSE4_FGT-6.0 Exam - Question 124

Question

View the exhibit. A user behind the FortiGate is trying to go to http://www. addictinggames. com (Addicting Games). Based on this configuration, which statement is true?

Examice · Accepted Answer

Addicting.Games is allowed based on the Application Overrides configuration. Application Overrides take precedence in the scanning order over Filter Overrides and Category settings. In this case, the Application Override for Addicting Games is explicitly set to Allow, meaning it will be permitted regardless of other configurations.

ramiropalm · Answer

Does anyone kno if A is the correct answer? I found something on Forti Sec p 438 but I'm not sure.

Ctnroger · Answer

The only way it would not be A is if adicting game is inside the risk category, but i don't think so

Yow1234 · Answer

It will be B (blocked)
Addicting game is inside Risk Filter Override

Shieshalom · Answer

A is the answer. based on the Scan order. Application and Filter overrides>>Category
Application and Filter overrides follows the same rules as firewall policy. Application override will be considered first. Fortigate_secutity 6.4 study guide Pg438

nerdypitt · Answer

- FGT Security 7.2 p310
	- The application control profile scans for matches in this order:
		○ Application and filter overrides: If you have configured any applications overrides or filter overrides, the application control profile considers those first. It looks for a matching override starting at the top of the list, like firewall policies.
		○ Categories: Finally, the application control profiles applies the action that you've configured for applications in your selected categories.

NSE4_FGT-6.0 Exam - Question 124

Discussion