nerdexam
Fortinet

NSE4 · Question #243

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

The correct answer is D. Antivirus scanning supports grayware protection. FortiGate's antivirus scanning provides comprehensive protection, including the ability to detect and block grayware, which encompasses a variety of unwanted software.

Submitted by noor.lb· Apr 18, 2026Security Profiles and Content Inspection

Question

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

Options

  • AAntivirus scanning provides end-to-end virus protection for client workstations.
  • BAntivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
  • CAntivirus scanning supports banned word checking.
  • DAntivirus scanning supports grayware protection.

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    4% (1)
  • D
    88% (22)

Why each option

FortiGate's antivirus scanning provides comprehensive protection, including the ability to detect and block grayware, which encompasses a variety of unwanted software.

AAntivirus scanning provides end-to-end virus protection for client workstations.

Antivirus scanning on a FortiGate provides protection at the network perimeter, not 'end-to-end' for client workstations, which still require their own endpoint security solutions.

BAntivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.

While FortiGate AV scans many common protocols, the core antivirus function protects a wider range of application layer protocols than just HTTP, Telnet, SMTP, and FTP, and Telnet is less relevant for virus protection in modern contexts.

CAntivirus scanning supports banned word checking.

Banned word checking is a feature typically associated with data loss prevention (DLP) or content filtering, not primarily with the core antivirus scanning function.

DAntivirus scanning supports grayware protection.Correct

FortiGate's antivirus scanning capabilities extend beyond traditional viruses to include protection against grayware. Grayware refers to applications that are not necessarily malicious but can still cause undesirable behavior, such as adware, spyware, and other potentially unwanted applications (PUAs).

Concept tested: FortiGate antivirus capabilities including grayware

Source: https://docs.fortinet.com/document/fortigate/7.0.0/security-fabric-administration-guide/209971/antivirus-profiles

Topics

#Antivirus scanning#Grayware protection#Security profiles

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice