nerdexam
Fortinet

NSE4_FGT-6.4 · Question #72

Which three statements about a flow-based antivirus profile are correct? (Choose three.)

The correct answer is B. FortiGate buffers the whole file but transmits to the client simultaneously. D. Optimized performance compared to proxy-based inspection. E. Flow-based inspection uses a hybrid of scanning modes available in proxy-based inspection. FLow-Base Inspection Mode 1. Optimized performance compared to proxy-based scan - used a hybrid of advanced scan modes available only in proxy-based profile - Proxy-based offers two scanning modes: default scanning and legacy scanning - Flow-based is designed to use a hybrid of…

Security Profiles

Question

Which three statements about a flow-based antivirus profile are correct? (Choose three.)

Options

  • AIPS engine handles the process as a standalone.
  • BFortiGate buffers the whole file but transmits to the client simultaneously.
  • CIf the virus is detected, the last packet is delivered to the client.
  • DOptimized performance compared to proxy-based inspection.
  • EFlow-based inspection uses a hybrid of scanning modes available in proxy-based inspection.

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    72% (21)
  • C
    17% (5)

Explanation

FLow-Base Inspection Mode 1. Optimized performance compared to proxy-based scan - used a hybrid of advanced scan modes available only in proxy-based profile - Proxy-based offers two scanning modes: default scanning and legacy scanning - Flow-based is designed to use a hybrid of proxy-based scanning modes 2. FortiGate buffers the whole file ,but transmits to the client simultaneously - When the last packets arrives , the AV engine starts the scan - Files bigger than buffer size are not scanned -can enable logging of these files - Packets are not delayed by scan -expect last packet - Lower perceived latency -data loads faster If the virus is detected, the last packet is dropped, and the connection is reset if an identical request is made, the block replacement page is inserted immediately (FortiGate Security 6.4

Topics

#flow-based antivirus#inspection modes#IPS engine#virus detection

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-6.4 Practice