Configure Antivirus Scanning Modes to Neutralize Malware Threats NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which protocol is NOT typically included in the protocol options for antivirus scanning on FortiGate?

   • AIMAP
   • BHTTP
   • CFTP
   • DDNS
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which action can help resolve performance impacts caused by antivirus scanning?

   • AIncrease the buffer size in the antivirus profile.
   • BSwitch from proxy-based to flow-based inspection.
   • CUse the extended virus database for more thorough scanning.
   • DDisable antivirus scanning on all firewall policies.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In an antivirus profile, what is the purpose of the 'Protocol Options' settings?

   • ATo select which antivirus database is used for each protocol.
   • BTo configure how each protocol's traffic is scanned for viruses.
   • CTo specify which protocols are allowed through the firewall.
   • DTo enable or disable the antivirus engine for each protocol.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network administrator is configuring a new FortiGate for a small office. They want to enable antivirus scanning for HTTP and FTP traffic in flow mode. They also want to ensure that any detected malware is logged for later review. What should they do?

   • ACreate an antivirus profile, enable logging, and apply it to the firewall policies for HTTP and FTP.
   • BEnable antivirus scanning globally in the FortiGate's system settings.
   • CConfigure antivirus scanning in the firewall policy's 'Security Profiles' section without creating a profile.
   • DUse the default antivirus profile and apply it to all policies.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization has a mix of traffic: HTTP downloads, SMTP email, and FTP transfers. They want to ensure that all traffic is scanned for malware, but they have limited resources on their FortiGate. They are considering using flow mode for HTTP and FTP, and proxy mode for SMTP. What is the most important consideration for this approach?

   • AFlow mode may not detect malware in email attachments as effectively as proxy mode, so SMTP should use proxy mode.
   • BFlow mode cannot scan FTP traffic, so they must use proxy mode for FTP.
   • CProxy mode is faster than flow mode, so it should be used for all traffic.
   • DFlow mode and proxy mode cannot be used simultaneously on the same FortiGate.
   Reveal Solution Discussion Select an answer first