Exam FCP_FGT_AD-7.4 topic 1 question 49 discussion

Page 346 (under Application Control > How Application Control Works) "Application control uses the application signature database and protocol decoders to identify application traffic. Certificate-inspection mode is sufficient for application identification. Full SSL inspection is not required unless deeper content inspection is needed."

If this is really an exam questions, it is really a question made to get you wrong... you must know the specific signature for facebook, to understand that it requires SSL deep inspection, otherwise, anyone could think that it would be another app signature which should be included.

There is NO "reaction" app signature for facebook, "like button" is enough to leave reactions but it has a "lock" icon that does mean, "SSL deep inspection is required"

The Facebook_Like.Button is selected. Facebook_Like.Button ID 29210 Summary This indicates an attempt to "Like" a content that is shared on the Facebook servers. Facebook Like is a feature that allows users to display their reaction to contents that are shared on the Facebook servers. Deep inspection is required on this application signature. It is not on Video Play

Rpta. A Pag.251

A - Deep inspection is required for some apps, including this one. Refer to the old exam question where it is clearer. https://www.examtopics.com/discussions/fortinet/view/92003-exam-nse4_fgt-70-topic-1-question-44-discussion/

The issue appears to be with the application control profile settings in the security profile. Users can access and play videos but cannot leave reactions. This suggests that the application control profile lacks the required signatures to allow these actions. Therefore, the correct resolution would be: D. Get the additional application signatures required to add to the security policy. You would need to ensure the application signatures for actions like "Facebook_Reaction" or any related granular actions are included in the application control profile for Facebook.

A. In the previous version it was clearer, without deep inspection some functions are not available such as leaving reactions

Α does not make sense. I would choose D.

In previous versions of the exam, the question is clearer, because in Application and Filters Override it is clarified with a lock symbol that the application is encrypted, and therefore SSL deep inspection is required.

I am confused. It is mentioned, that users can open facebook and play videos. This means, there must be a policy, that allows access to facebook, even without deep inspection, BUT not for all applications. My guess is "D" therefore, but maybe this question and answers are not original to the real exam.

D. So I understand it doesn't need a deeper inspection. requires users to perform other tasks such as comments and reactions. I mean it needs additional applications so that they can be allowed and so users can react to the videos

A the answer

Why everyone voted A (Including my self) but it says "Correct Answer D"?

Deep inspection needed.

A is correct

It's A.