NSE4 Google Safe Search Practice Question
A school district uses a FortiGate to filter web traffic for students. The administrator wants to enforce that Google searches are filtered for explicit content. Which configuration should be applied?
⚠ Common exam trap
NSE4 often tests the misconception that application control or URL filtering can enforce safe search, when in fact only the explicit Safe Search setting in the web filter profile performs this function.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable 'Google Safe Search' in the web filter profile under 'FortiGuard Categories' -> 'Safe Search'.
FortiGate's web filter profile includes a 'Safe Search' feature that enforces safe search on popular search engines like Google, Bing, and YouTube. Enabling 'Google Safe Search' under FortiGuard Categories -> Safe Search forces Google to return filtered results by modifying the search request to include the safe search parameter (e.g., 'safe=active'). This is the correct and granular way to enforce safe search without blocking search engines entirely.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable 'Google Safe Search' in the web filter profile under 'FortiGuard Categories' -> 'Safe Search'.
Why this is correct
Enabling Google Safe Search in the web filter profile forces Google to return filtered results, blocking explicit content at the search engine itself. This satisfies the requirement to enforce filtered Google searches for students without inspecting every result page.
- ✗
Use an application control profile to block the 'Google Search' application.
Why it's wrong here
Blocking the Google Search application stops searches altogether instead of enforcing SafeSearch on results. It is tempting because application control identifies Google traffic precisely, and would be correct if the policy were to deny Google search while permitting other Google services.
- ✗
Create a URL filter to block URLs containing 'porn' or 'adult'.
Why it's wrong here
Keyword URL filtering only blocks URLs literally containing those strings, while Google search results embed explicit content in query parameters and result links, so filtering fails. It is tempting because URL filters are simple to write, and would be correct for blocking a known static domain or path.
- ✗
Block the URL category 'Search Engines' and allow only approved search engines.
Why it's wrong here
Blocking the Search Engines category prevents all Google searches outright rather than enforcing SafeSearch filtering, so students lose search entirely. It is tempting because category filtering is granular, and would be correct if the requirement were to prohibit search engine use completely.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE4 question from scratch — 773 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.