NSE7 Advanced Threat Protection Practice Question
A security engineer is troubleshooting a scenario where FortiGate is not blocking a known malicious URL categorized as 'Malware'. The web filtering profile is configured with 'monitor all' for the Malware category. What change should be made to block the URL?
⚠ Common exam trap
Many candidates think a static URL filter is required for blocking, overlooking that category-based actions in the web filter profile can directly block all URLs in a category without needing individual entries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change the action for Malware category from 'monitor' to 'block' in the web filter profile
The web filtering profile currently has the Malware category set to 'monitor all', which logs but does not block traffic. To block the URL, the action must be changed from 'monitor' to 'block' within the same web filter profile. This directly enforces the blocking action for all URLs categorized as Malware, including the known malicious URL.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure traffic shaping to rate limit the URL
Why it's wrong here
Traffic shaping does not block; it only limits bandwidth.
- ✗
Add a static URL filter with the exact URL and action 'block'
Why it's wrong here
While this would work, it is not the most efficient solution; the category action should be changed.
- ✗
Enable DNS filter with botnet C2 domain blocking
Why it's wrong here
DNS filter blocks domains, not URLs.
- ✓
Change the action for Malware category from 'monitor' to 'block' in the web filter profile
Why this is correct
Setting the category action to 'block' will block all URLs in that category.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.