View all questions & answers for the FCP - FortiGate 7.4 Administrator Exam Materials exam


Question 12 Discussion

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B). Why is the user unable to receive a block replacement message when downloading an infected file for the first time? (Choose one answer)

  • A. A. The intrusion prevention security profile must be enabled when using flow-based inspection mode.
  • B. The option to send files to FortiSandbox for inspection is enabled
  • C. The firewall policy performs a full content inspection on the file
  • D. Flow-based inspection is used, which resets the last packet to the user
Correct Answer: D

Brave-Dump Clients Votes

A 100%

Comments



BACHIRI Mustapha Nabil 2025-09-01 18:08:28

Selected Answers: A


I think A is more correct because antivirus works with IPS engine, as we can see on page 195 from study guide.
  • Brave-Dumps Admin 2025-09-02 15:13:06
    D is the correct, please check Fortigate 7.4 Study Guide page 200​.