Fortinet
NSE4_FGT-6.4 · Question #82
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below. An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the…
The correct answer is E. The firewall policy is not using a full SSL inspection profile. See the full explanation below for the reasoning.
Question
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below. An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic. What is a possible reason for this?
Exhibits
Options
- AThe IPS filter is missing the Protocol: HTTPS option.
- BThe HTTPS signatures have not been added to the sensor.
- CA DoS policy should be used, instead of an IPS sensor.
- DA DoS policy should be used, instead of an IPS sensor.
- EThe firewall policy is not using a full SSL inspection profile.
How the community answered
(31 responses)- A6% (2)
- C13% (4)
- D3% (1)
- E77% (24)
Community Discussion
No community discussion yet for this question.