An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you…

The 'Exempt' action is specifically designed for creating exceptions within Application Control. When a broader category like "Video.Audio" is blocked, an application override rule with the action set to 'Exempt' for the CNN application signature will bypass the category-level block. This allows granular control, enabling access to a specific application while restricting others in the same category, fulfilling the organization's requirement.

A. Allow: 'Allow' is a primary action for an entire application category in the main profile, not a specific action used in an override rule to create an exception to a block.

B. Pass: The 'Pass' action allows traffic to proceed to the next security inspection engine without overriding the block action defined for the application's category.

C. Permit: 'Permit' is not a standard action within the FortiOS/FortiSASE Application Control override configuration; 'Allow' or 'Exempt' are the relevant terms for granting access.

1. FortiOS 7.4.0 Administration Guide, "Application Control", section "Application and filter overrides". The documentation states, "Exempt: Exempts the application from the application category that it belongs to." This confirms its use for creating exceptions.