View all questions & answers for the FCP - FortiGate 7.4 Administrator Exam Materials exam


FCP - FortiGate 7.4 Administrator Exam Materials-Question 12 Discussion

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B). Why is the user unable to receive a block replacement message when downloading an infected file for the first time? (Choose one answer)

  • A. A. The intrusion prevention security profile must be enabled when using flow-based inspection mode.
  • B. The option to send files to FortiSandbox for inspection is enabled
  • C. The firewall policy performs a full content inspection on the file
  • D. Flow-based inspection is used, which resets the last packet to the user
Correct Answer: D

Brave-Dump Clients Votes

A 100%

Comments



BACHIRI Mustapha Nabil 2025-09-01 18:08:28

Selected Answers: A


I think A is more correct because antivirus works with IPS engine, as we can see on page 195 from study guide.
  • Brave-Dumps.com Admin 2025-09-02 15:13:06
    D is the correct, please check Fortigate 7.4 Study Guide page 200​.