nerdexam
FortinetFortinet

NSE4 · Question #504

NSE4 Question #504: Real Exam Question with Answer & Explanation

Sign in or unlock NSE4 to reveal the answer and full explanation for question #504. The question stem and answer options stay visible for context.

Submitted by jaden.t· Apr 18, 2026Security Profiles and Content Inspection

Question

You are creating a custom signature. Which has incorrect syntax?

Options

  • AF-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)
  • BF-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";-- service SMTP; --no_case;--
  • CF-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)
  • DF-SBID(--name "Block".HTTP.POST"; --protocol tcp;-- service HTTP;-- flow from_client; --

Unlock NSE4 to see the answer

You've previewed enough free NSE4 questions. Unlock NSE4 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Custom Signature#IPS#Syntax#Security Profile
Full NSE4 PracticeBrowse All NSE4 Questions