nerdexam
Fortinet

NSE4 · Question #557

What inspections are executed by the IPS engine? (Choose three.)

The correct answer is A. Application control B. Flow-based data leak prevention D. Flow-based web filtering. The FortiGate IPS engine is responsible for performing application control, flow-based data leak prevention, and flow-based web filtering.

Submitted by packet_pusher· Apr 18, 2026Security Profiles and Content Inspection

Question

What inspections are executed by the IPS engine? (Choose three.)

Options

  • AApplication control
  • BFlow-based data leak prevention
  • CProxy-based antispam
  • DFlow-based web filtering
  • EProxy-based antivirus

How the community answered

(33 responses)
  • A
    91% (30)
  • C
    6% (2)
  • E
    3% (1)

Why each option

The FortiGate IPS engine is responsible for performing application control, flow-based data leak prevention, and flow-based web filtering.

AApplication controlCorrect

Application control is a core function of the IPS engine, which identifies and manages network applications to enforce security policies.

BFlow-based data leak preventionCorrect

Flow-based data leak prevention (DLP) inspects data streams for sensitive information, and this inspection is integrated into the flow-based processing of the IPS engine.

CProxy-based antispam

Proxy-based antispam inspection operates by acting as a mail transfer agent (MTA) or mail proxy, which is a different engine than the flow-based IPS engine.

DFlow-based web filteringCorrect

Flow-based web filtering analyzes web traffic in real-time, matching patterns and categories against policies, a task typically handled by the IPS engine's deep packet inspection capabilities.

EProxy-based antivirus

Proxy-based antivirus inspection involves proxying traffic to perform file-level scanning, a function distinct from the primary flow-based IPS engine.

Concept tested: FortiGate IPS engine capabilities

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86214/security-features

Topics

#IPS engine#Flow-based inspection#Security profiles#Content inspection

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice