View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam
NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #67 Discussion
Community Explanations & Comments (10)
Kiko
1 year ago
Selected: B
Please refer to the Study Guide page 294.
Brave-Dumps.com Admin
1 year ago
Partially correct – Packet Logging is enabled, which means FortiGate does store a copy of the packet, but that’s not the main point of the question, as the "Action" setting is more important here.
Kiko
1 year ago
The action of the signature here is Block which means, as the Study Guide mentions: Select Block to silently drop traffic matching any signature INCLUDED THE ENTRY (always on page 294.)
Kiko
1 year ago
Selected: B
@Website Admin: The action of the signature here is Block which, as the Study Guide mentions: Select Block to silently drop traffic matching any signature INCLUDED THE ENTRY (always on page 294.)
Nick
1 year ago
Selected: B
Only possible answer is B as far as I can see. As Kiko states, the action is set to BLOCK which will silently drop traffic matching any of the signatures included in the entry.
Jay gabasa
1 year ago
Selected: B
How FortiGate evaluates IPS signatures (Study Guide page ~305–308)
“When you add a signature to an IPS sensor, the sensor’s override settings take precedence over the default signature action in the FortiGuard database.”
This means:
The IPS profile’s action (Block) overrides the base signature’s action (Pass).
The signature “FTP.Login.Failed” is still low severity, but because it’s enabled and logging is on, FortiGate blocks it and logs the event (including packet data).
“When you add a signature to an IPS sensor, the sensor’s override settings take precedence over the default signature action in the FortiGuard database.”
This means:
The IPS profile’s action (Block) overrides the base signature’s action (Pass).
The signature “FTP.Login.Failed” is still low severity, but because it’s enabled and logging is on, FortiGate blocks it and logs the event (including packet data).
Giacomo Marielli
1 year ago
Selected: C
In the IPS profile, the FTP.Login.Failed signature has:
Action = Pass → FortiGate allows the traffic to continue.
Packet Logging = Enable → FortiGate logs packets that match the signature.
Severity = Low → It’s a low-priority event, so no blocking occurs.
➡️ In short, FortiGate lets the traffic through but records it in the logs for monitoring or analysis.
Correct answer: ✅ C. FortiGate allows this low-severity signature packet and creates a log.
Action = Pass → FortiGate allows the traffic to continue.
Packet Logging = Enable → FortiGate logs packets that match the signature.
Severity = Low → It’s a low-priority event, so no blocking occurs.
➡️ In short, FortiGate lets the traffic through but records it in the logs for monitoring or analysis.
Correct answer: ✅ C. FortiGate allows this low-severity signature packet and creates a log.
Kai Flamia
6 months ago
Selected: C
What is the answer now ? I think its C
Brave-Dumps.com Admin
6 months ago
No, it is B
ali
5 months ago
Selected: B
D is wrong because in the image the severity is information (and not low)
Anonymous User
4 months ago
Selected: C
C - FTP.Login.Failed IPS Signature severity is low and action is set to allow. Packet logging doesn't mean that the packet is stored, only that the packet is logged.
Ahmed El Hasseen El Tom El Shaikh Berair
3 months ago
Selected: B
67
[email protected]
2 weeks ago
Selected: C
Action Pass is Green, Severity is Low and Hence C.
Packet Logging is enabled. However, mentioned stores a local copy which we cannot find out from the screenshot mentioned and hence, B is incorrect.
Packet Logging is enabled. However, mentioned stores a local copy which we cannot find out from the screenshot mentioned and hence, B is incorrect.
Refer to the exhibit. Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit. What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile? (Choose one answer)
Brave-Dump Community Votes