NSE4 Security Profiles Practice Question
A company policy requires that all web searches by employees use safe search. Which setting should be configured in the web filtering profile?
⚠ Common exam trap
A common mix-up: candidates confuse 'Enforce Safe Search' with URL filtering or category blocking, assuming that blocking or warning on categories like 'Search Engines' would achieve the same result, but safe search enforcement is a specific feature that modifies search queries rather than blocking access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable 'Enforce 'Safe Search' on Google, Bing, and Yahoo'
The 'Enforce Safe Search' setting in a FortiGate web filtering profile forces Google, Bing, and Yahoo to use their built-in safe search parameters (e.g., &safe=active for Google). This ensures that all web searches from the network comply with the company policy by appending the required query strings to search URLs, blocking explicit content at the search engine level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable 'Restrict YouTube Access'
Why it's wrong here
Enabling 'Restrict YouTube Access' is a FortiGate feature that enforces YouTube's Restricted Mode and blocks access to YouTube content deemed inappropriate based on FortiGuard's YouTube classification. It is specifically scoped to the YouTube platform and does not affect web searches performed on Google, Bing, or Yahoo, so it cannot satisfy a policy requiring safe search enforcement across search engines.
- ✗
Create a URL filter to block URLs with 'safe search'
Why it's wrong here
Creating a URL filter to block URLs containing 'safe search' would actually prevent users from reaching the safe search settings pages or the 'safe search' query parameter used by search engines. This could interfere with users who legitimately try to enable safe search and would not force the search engine to operate in safe search mode; it simply blocks certain URLs, which is the opposite of enforcing a safe search policy.
- ✓
Enable 'Enforce 'Safe Search' on Google, Bing, and Yahoo'
Why this is correct
Enabling 'Enforce Safe Search on Google, Bing, and Yahoo' is the correct FortiGate web filtering option because it actively forces these three search engines to use their safe search settings by rewriting URLs, setting cookies, or leveraging FortiGuard's search engine integration. Even if a user attempts to disable safe search in their browser, the FortiGate intercepts the request and ensures the search results are filtered at the network level, thereby meeting the company policy requirement.
- ✗
Set the 'Action' for FortiGuard categories to 'Warning'
Why it's wrong here
Setting the 'Action' for a FortiGuard category to 'Warning' configures the FortiGate to display an interstitial warning page when a user attempts to access a site in that category, but it still allows the user to click through and continue. This is a user-awareness and policy-acceptance mechanism, not an enforcement mechanism; it does nothing to modify or enforce safe search settings on any search engine, so it cannot fulfill the requirement to enforce safe search for all web searches.
Go deeper
Related to this question
About these practice questions
This NSE4 question is part of Courseiva's 773-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.