StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Inspection modes and web filtering

Practice question 247 of 440 · medium

Synthetic event: type="utm" subtype="webfilter" policyid=25 profile="staff" action="blocked". Which field identifies the enforcing security engine?

Choose the single best answer.

  1. A.profile="staff"
  2. B.action="blocked"
  3. C.subtype="webfilter"
  4. D.policyid=25
Show the answer and explanation

✓ Correct answer

  • subtype="webfilter"

Subtype identifies the web-filter engine. Policy ID and profile locate configuration; action records the result but does not uniquely identify which engine enforced it.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.