StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 94 of 440 · medium

An unmanaged browser follows a FortiSASE PAC file. A custom non-proxy-aware TCP application works without SWG logs. Which explanation is most likely?

Choose the single best answer.

  1. A.FortiSASE inspection is proven by application success alone
  2. B.DNS filtering automatically redirects every TCP application
  3. C.The application is outside the proxy steering path
  4. D.The PAC file necessarily creates a full-device tunnel
Show the answer and explanation

✓ Correct answer

  • The application is outside the proxy steering path

PAC steering applies to proxy-aware clients and does not tunnel every application. Success is not proof of inspection, and DNS filtering is not a universal traffic-redirection mechanism.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.