NSE4 Question #243: Real Exam Question with Answer & Explanation

Question

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

Options

• AAntivirus scanning provides end-to-end virus protection for client workstations.
• BAntivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
• CAntivirus scanning supports banned word checking.
• DAntivirus scanning supports grayware protection.

Explanation

FortiGate's antivirus scanning provides comprehensive protection, including the ability to detect and block grayware, which encompasses a variety of unwanted software.

Common mistakes.

• A. Antivirus scanning on a FortiGate provides protection at the network perimeter, not 'end-to-end' for client workstations, which still require their own endpoint security solutions.
• B. While FortiGate AV scans many common protocols, the core antivirus function protects a wider range of application layer protocols than just HTTP, Telnet, SMTP, and FTP, and Telnet is less relevant for virus protection in modern contexts.
• C. Banned word checking is a feature typically associated with data loss prevention (DLP) or content filtering, not primarily with the core antivirus scanning function.

Concept tested. FortiGate antivirus capabilities including grayware

Reference. https://docs.fortinet.com/document/fortigate/7.0.0/security-fabric-administration-guide/209971/antivirus-profiles

No community discussion yet for this question.