NSE4 · Question #557
What inspections are executed by the IPS engine? (Choose three.)
The correct answer is A. Application control B. Flow-based data leak prevention D. Flow-based web filtering. The FortiGate IPS engine is responsible for performing application control, flow-based data leak prevention, and flow-based web filtering.
Question
What inspections are executed by the IPS engine? (Choose three.)
Options
- AApplication control
- BFlow-based data leak prevention
- CProxy-based antispam
- DFlow-based web filtering
- EProxy-based antivirus
How the community answered
(33 responses)- A91% (30)
- C6% (2)
- E3% (1)
Why each option
The FortiGate IPS engine is responsible for performing application control, flow-based data leak prevention, and flow-based web filtering.
Application control is a core function of the IPS engine, which identifies and manages network applications to enforce security policies.
Flow-based data leak prevention (DLP) inspects data streams for sensitive information, and this inspection is integrated into the flow-based processing of the IPS engine.
Proxy-based antispam inspection operates by acting as a mail transfer agent (MTA) or mail proxy, which is a different engine than the flow-based IPS engine.
Flow-based web filtering analyzes web traffic in real-time, matching patterns and categories against policies, a task typically handled by the IPS engine's deep packet inspection capabilities.
Proxy-based antivirus inspection involves proxying traffic to perform file-level scanning, a function distinct from the primary flow-based IPS engine.
Concept tested: FortiGate IPS engine capabilities
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86214/security-features
Topics
Community Discussion
No community discussion yet for this question.