nerdexam
Fortinet

NSE4 · Question #212

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

The correct answer is A. The proxy will not allow a file to be transmitted in multiple streams simultaneously. When FTP splice is disabled on a FortiGate, the proxy acts as a full-proxy, preventing files from being transmitted in multiple simultaneous streams during an upload.

Submitted by krish.m· Apr 18, 2026Content Inspection

Question

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

Options

  • AThe proxy will not allow a file to be transmitted in multiple streams simultaneously.
  • BThe proxy sends the file to the server while simultaneously buffering it.
  • CIf the file being scanned is determined to be infected, the proxy deletes it from the server by
  • DIf the file being scanned is determined to be clean, the proxy terminates the connection and

How the community answered

(51 responses)
  • A
    90% (46)
  • B
    2% (1)
  • C
    6% (3)
  • D
    2% (1)

Why each option

When FTP splice is disabled on a FortiGate, the proxy acts as a full-proxy, preventing files from being transmitted in multiple simultaneous streams during an upload.

AThe proxy will not allow a file to be transmitted in multiple streams simultaneously.Correct

When FTP splice is disabled, the FortiGate acts as a full-proxy, terminating the client and server connections separately, which inherently prevents parallel data streams for a single file upload as it processes the entire file stream sequentially for security inspection.

BThe proxy sends the file to the server while simultaneously buffering it.

A full-proxy buffers the entire file before sending it to the server for scanning, rather than simultaneously buffering and sending, to ensure complete inspection before delivery.

CIf the file being scanned is determined to be infected, the proxy deletes it from the server by

If a file is determined to be infected, the FortiGate in full-proxy mode typically blocks the transmission of the file to the server; it does not delete an already transmitted file from the server.

DIf the file being scanned is determined to be clean, the proxy terminates the connection and

If a file is clean, the proxy allows the transmission to complete; it does not terminate the connection but rather ensures the data reaches its destination.

Concept tested: FTP proxy behavior with FTP splice disabled

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523930/proxy-inspection

Topics

#FTP proxy#Content inspection#Proxy behavior#FTP splice

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice