An administrator has enabled proxy-based antivirus scanning and configured the following settings: Which statement about the above configuration is true?

When proxy-based antivirus scanning is configured with an `oversize-limit` of 10 MB, files exceeding this size are not sent to the antivirus engine for scanning; if the `oversize-action` is set to block, such files are entirely blocked from passing through.

The FortiGate does not scan only the first 10 MB and then allow the rest; it either scans the entire file if it's within the limit, or it takes the `oversize-action` (block/bypass) for the entire file.

Files exceeding the `oversize-limit` are either blocked or bypassed based on `oversize-action`, not specifically sent to a heuristics engine; heuristics are part of the broader scan process for files within the limit.

FortiGate does not scan files in chunks in the context of an `oversize-limit`; the limit applies to the total file size to determine if it should be scanned at all.