nerdexam
Fortinet

NSE4_FGT-7.0 · Question #135

FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can…

The correct answer is A. Antivirus scanning D. Intrusion prevention. In a policy-based NGFW configuration, Antivirus and Intrusion Prevention are two primary security profiles that can be applied to a security policy alongside web filtering and application control for comprehensive threat protection.

Security Profiles

Question

FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)

Options

  • AAntivirus scanning
  • BFile filter
  • CDNS filter
  • DIntrusion prevention

How the community answered

(23 responses)
  • A
    87% (20)
  • B
    4% (1)
  • C
    9% (2)

Why each option

In a policy-based NGFW configuration, Antivirus and Intrusion Prevention are two primary security profiles that can be applied to a security policy alongside web filtering and application control for comprehensive threat protection.

AAntivirus scanningCorrect

Antivirus scanning is a distinct security profile designed to detect and block malware, and it is commonly applied to security policies in FortiGate NGFW configurations.

BFile filter

While a file filter is a security profile, Antivirus and IPS are more commonly recognized as distinct, primary NGFW security profiles often enabled alongside web and application control.

CDNS filter

DNS filtering is a security profile, but Antivirus and IPS are more encompassing and frequently deployed alongside web filtering and application control as foundational NGFW capabilities.

DIntrusion preventionCorrect

Intrusion Prevention System (IPS) is a core NGFW security profile used to identify and prevent network attacks and vulnerabilities, making it a standard option for application on security policies.

Concept tested: FortiGate security profiles and policy application

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/523491/security-profiles

Topics

#security profiles#NGFW#firewall policies#antivirus#IPS

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice