Exam FCSS_EFW_AD-7.4 topic 1 question 25 discussion

Actual exam question from Fortinet's FCSS_EFW_AD-7.4

Question #: 25
Topic #: 1

Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device.
FortiGuard Distribution Network on FortiGate

An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.
Why is the web filter database version not visible on the GUI, such as with IPS definitions?

A. The web filter database is stored locally, but the administrator must run over CLI diagnose autoupdate versions.
B. The web filter database is stored locally on FortiGate, but it is hidden behind the GUI. It requires enabling debug mode to make it visible.
C. The web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or FortiManager for web filter ratings on demand.
D. The web filter database is only accessible after manual syncing with a valid FDS server using diagnose test update info.

Show Suggested Answer

Suggested Answer: C 🗳️

by Tweefo at March 27, 2025, 1:02 p.m.

Comments

Submit Cancel

Yaghu

3 days, 22 hours ago

Selected Answer: C

EFW Admin 7.4 Study guide, p. 170.

upvoted 1 times

...

Tweefo

6 days, 3 hours ago

Selected Answer: C

C is correct. FortiGate does not store a full local web filtering database. When web traffic matches a policy using web filtering, FortiGate queries FortiGuard for the URL rating. The result is then cached locally on the firewall for future use.

upvoted 1 times

...

Exam FCSS_EFW_AD-7.4 All Questions

View all questions & answers for the FCSS_EFW_AD-7.4 exam

Exam FCSS_EFW_AD-7.4 topic 1 question 25 discussion

Comments

Yaghu

Tweefo

SY0-701