The eicar test virus is put into a zip archive, which is given the password of "Fortinet" in order to open the archive. Review the configuration in the exhibits shown below; then answer the question…

An Antivirus profile alone cannot typically scan inside a password-protected archive without the password being known or a specific option enabled to handle encrypted archives (e.g., blocking them outright or attempting common passwords), which is not indicated here.

The UTM Proxy Options profile defines *how* traffic is processed for inspection (e.g., buffering, timeouts, actions on corrupted files), but it does not perform the content detection or pattern matching itself.

FortiGate's DLP (Data Loss Prevention) feature is designed to detect specific patterns and content within data streams and files. If a DLP sensor is configured to identify the EICAR test string, it can detect and block the file, even if it is in a password-protected archive, provided the default UTM Proxy settings allow for deep content inspection of compressed or archived files.

Since Antivirus (Exhibit A) is ineffective against password-protected archives without specific configuration, 'All of the Exhibits' cannot be correct.

If Exhibit C with default UTM Proxy settings is sufficient, then Exhibit C with *non-default* UTM Proxy settings (Exhibit B) might not be necessary or could introduce unknown variables depending on the non-default settings.