A network administrator is configuring antivirus scanning in flow mode for a branch office. They want to ensure that files downloaded via HTTP are scanned, but they are concerned about the performance impact on the FortiGate. Which configuration option would best balance security and performance?

Use proxy mode instead of flow mode for HTTP scanning.

Disable antivirus scanning for HTTP and only scan email protocols.

Enable 'Scan files on-the-fly' and set the 'Maximum scan size' to a reasonable value.

Enable 'Scan files after download' to reduce latency.

A security analyst needs to review antivirus detection events on a FortiGate to investigate a potential malware outbreak. They want to see detailed information about the virus name, action taken, and the source/destination IPs. What should they do to ensure this information is available?

Use the 'get antivirus status' CLI command to view real-time detection events.

Check the FortiGate's traffic log, which automatically includes antivirus detection details.

Enable 'Log all traffic' in the firewall policy to capture antivirus events.

Enable antivirus event logging in the antivirus profile and configure the log settings to include all relevant fields.

A company's security team is deploying a new FortiGate in flow mode to inspect web traffic. They want to minimize the performance impact of antivirus scanning while still catching malware in HTTP downloads. However, they have noticed that some files are not being scanned because they exceed the maximum scan size limit. What should they configure to address this issue?

Enable 'Scan files on-the-fly' in the antivirus profile.

Disable the antivirus profile for HTTP traffic and rely on the firewall's IPS.

Increase the maximum scan size in the antivirus profile and enable oversize file logging.

Switch the inspection mode to proxy-based to allow scanning of all file sizes.

An organization wants to ensure that malware is not transmitted via email. They have configured an antivirus profile and applied it to the SMTP protocol in flow mode. However, they notice that some emails with attachments are not being scanned. What could be the reason?

The FortiGate's antivirus database is not updated, so it cannot scan new malware.

The antivirus profile is not applied to the correct firewall policy.

SMTP is not supported in flow mode; use proxy mode instead.

The 'Maximum scan size' is set too low, causing large attachments to be skipped.

Where do you enable antivirus event logging on a FortiGate?

In the firewall policy under 'Logging'.

In the antivirus profile under 'Logging'.

In the global 'Log & Report' settings under 'Antivirus'.

In the antivirus profile under 'Options'.

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 3Objective 4

Configure Antivirus Scanning Modes to Neutralize Malware Threats NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Part of the Content Inspection domain, which accounts for 25-30% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–18 in this domain), expect 2–4 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

25-30%of the exam

Questions 1–5

1application · medium
A network administrator is configuring antivirus scanning in flow mode for a branch office. They want to ensure that files downloaded via HTTP are scanned, but they are concerned about the performance impact on the FortiGate. Which configuration option would best balance security and performance?
Select an answer first
2application · medium
A security analyst needs to review antivirus detection events on a FortiGate to investigate a potential malware outbreak. They want to see detailed information about the virus name, action taken, and the source/destination IPs. What should they do to ensure this information is available?
Select an answer first
3application · medium
A company's security team is deploying a new FortiGate in flow mode to inspect web traffic. They want to minimize the performance impact of antivirus scanning while still catching malware in HTTP downloads. However, they have noticed that some files are not being scanned because they exceed the maximum scan size limit. What should they configure to address this issue?
Select an answer first
4application · medium
An organization wants to ensure that malware is not transmitted via email. They have configured an antivirus profile and applied it to the SMTP protocol in flow mode. However, they notice that some emails with attachments are not being scanned. What could be the reason?
Select an answer first
5foundation · easy
Where do you enable antivirus event logging on a FortiGate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.