NSE4 · Question #119
A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?
The correct answer is C. Flow-based. FortiGate AntiVirus profiles use flow-based inspection mode to scan for viruses across protocols like SMTP, FTP, POP3, and SMB efficiently.
Question
A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?
Options
- AProxy
- BDNS
- CFlow-based
- DMan-in-the-middle
How the community answered
(40 responses)- A3% (1)
- B5% (2)
- C90% (36)
- D3% (1)
Why each option
FortiGate AntiVirus profiles use flow-based inspection mode to scan for viruses across protocols like SMTP, FTP, POP3, and SMB efficiently.
Proxy inspection can also scan these protocols but is generally more resource-intensive and often used when deeper inspection features like content archiving are required.
DNS is a protocol for name resolution and is not an inspection mode for an AntiVirus profile.
Flow-based inspection is commonly used for antivirus scanning on protocols like SMTP, FTP, POP3, and SMB, as it efficiently inspects traffic as it passes through without full proxy reassembly.
Man-in-the-middle refers to SSL/TLS inspection, not a general inspection mode for antivirus scanning on these unencrypted or separately encrypted protocols.
Concept tested: FortiGate antivirus inspection modes
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/700095/flow-based-and-proxy-based-inspection
Topics
Community Discussion
No community discussion yet for this question.