NSE 4 – FortiGate 6.4 — Question 80

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which two CLI commands will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering? (Choose two.)

Answer options

• A. set webfilter-force-off disable
• B. set webfilter-cache disable
• C. set protocol udp
• D. set fortiguard-anycast disable

Correct answer: C, D

Explanation

The correct answers, C and D, change the communication protocol to an unreliable option. 'set protocol udp' switches to UDP, which does not guarantee delivery, while 'set fortiguard-anycast disable' removes the use of anycast, which can affect reliability. Options A and B do not impact the communication protocol used for connecting to FortiGuard servers.