FortinetFortinet
NSE4 · Question #291
NSE4 Question #291: Real Exam Question with Answer & Explanation
Sign in or unlock NSE4 to reveal the answer and full explanation for question #291. The question stem and answer options stay visible for context.
Submitted by chiamaka_o· Apr 18, 2026Security Profiles and Content Inspection
Question
The following ban list entry is displayed through the CLI. get user ban list id cause src-ip-addr dst-ip-addr expires created 531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008 Based on this command output, which of the following statements is correct?
Options
- AThe administrator has specified the Attack and Victim Address method for the quarantine.
- BThis diagnostic entry results from the administrator running the diag ips log test command. This
- CA DLP rule has been matched.
- DAn attack has been repeated more than once during the holddown period; the expiry time has
Unlock NSE4 to see the answer
You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#CLI#Quarantine#IPS#Automated Actions