NSE4 · Question #348
Which statement about the FortiGuard services for the FortiGate is true?
The correct answer is A. Antivirus signatures are downloaded locally on the FortiGate.. Antivirus signatures for FortiGate FortiGuard services are downloaded and stored locally on the device to enable real-time threat detection.
Question
Which statement about the FortiGuard services for the FortiGate is true?
Exhibit
Options
- AAntivirus signatures are downloaded locally on the FortiGate.
- BFortiGate downloads IPS updates using UDP port 53 or 8888.
- CFortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.
- DThe web filtering database is downloaded locally on the FortiGate.
How the community answered
(33 responses)- A88% (29)
- B3% (1)
- C3% (1)
- D6% (2)
Why each option
Antivirus signatures for FortiGate FortiGuard services are downloaded and stored locally on the device to enable real-time threat detection.
FortiGate devices download and store antivirus signatures directly onto their local storage from FortiGuard to enable efficient, real-time scanning of network traffic for known malware.
FortiGate devices primarily download FortiGuard updates, including IPS, using TCP port 443 (HTTPS) by default, or sometimes UDP port 8888, not UDP port 53.
While FortiAnalyzer is used for centralized logging and reporting, FortiManager, not FortiAnalyzer, can be configured as a local FortiGuard Distribution Network (FDN) server to provide updates to FortiGates.
The comprehensive FortiGuard web filtering database is cloud-based and accessed in real-time by the FortiGate, rather than being fully downloaded and stored locally on the device due to its immense size and frequent updates.
Concept tested: FortiGuard service update mechanisms
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/79831/fortiguard-updates
Topics
Community Discussion
No community discussion yet for this question.