Exam FCP_FGT_AD-7.4 topic 1 question 25 discussion

Magic word "would" makes the difference, proxy-based won't make difference, it is about doing deep inspection on the packets.

Pag. 175 For antivirus or IPS control you should use a deep-inspection profile.

Deep inspection is needed to ensure good function for AV

The answer is B

The firewall policy does not apply deep content inspection

The answer is D

D is the correct answer.

D is the correct answer.

D would be the most accurate response. While Flow-Based inspection mode is limited, it still can scan viruses if they are not overly complex. SSL certificate inspection only inspects the certificate of the encrypted traffic, ensuring it is valid and not self-signed or expired. It does not decrypt the actual content of the SSL/TLS traffic, meaning that any malicious content inside encrypted HTTPS traffic will pass through without being inspected. So here, we can assume the EICAR file was accessed via HTTPS.