Courseiva
Nse 2 Technical Introduction TO Fortinet SecuritymediumMultiple ChoiceObjective-mapped

FORTINET-NSE123 Practice Question: Nse 2 Technical Introduction TO Fortinet Security

An administrator wants to ensure that internal users attempting to visit known phishing or malware-hosting domains are blocked automatically before establishing a connection. Which security profile should be added to the firewall policy?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Web Filtering profile with malicious domain blocking enabled

Web Filtering and DNS Filtering profiles block access to malicious, phishing, and command-and-control domains based on real-time FortiGuard intelligence.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Data Loss Prevention (DLP) sensor

    Why it's wrong here

    DLP prevents data exfiltration of sensitive keywords/files, not malicious domain browsing.

  • Traffic Shaping rule profile

    Why it's wrong here

    Traffic shapers manage bandwidth allocation, not malicious website blocking.

  • Antivirus signature profile in flow mode

    Why it's wrong here

    Antivirus scans downloaded files for malicious payloads, whereas web filtering blocks malicious URLs.

  • Web Filtering profile with malicious domain blocking enabled

    Why this is correct

    Web filtering categorizes and blocks phishing and malware distribution domains.

About these practice questions

This FORTINET-NSE123 question is part of Courseiva's 298-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Fortinet exam blueprint

This FORTINET-NSE123 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FORTINET-NSE123 exam.