Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam NSE4_FGT-6.4 topic 1 question 23 discussion

Actual exam question from Fortinet's NSE4_FGT-6.4
Question #: 23
Topic #: 1
[All NSE4_FGT-6.4 Questions]

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings.
Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

  • A. Traffic matching the signature will be silently dropped and logged.
  • B. The signature setting uses a custom rating threshold.
  • C. The signature setting includes a group of other signatures.
  • D. Traffic matching the signature will be allowed and logged.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Lionardo
Highly Voted 3 years ago
A is correct. FortiGate_Security_6.4 page 525 and 529. "pass" is only default action
upvoted 20 times
Hriibek
2 years, 4 months ago
"pass" is only default action To explain this: the Pass action on the specific signature would only be chosen, if the Action (on the top) was set to Default. But instead its set to Block, se the action is will be to block and drop.
upvoted 5 times
...
...
Xillar
Highly Voted 3 years ago
A is the correct answer
upvoted 5 times
...
juanK1982
Most Recent 2 years ago
Selected Answer: A
Is A the acción is block
upvoted 1 times
...
xandao
2 years, 1 month ago
A is correct. FortiGate Security 6.4 page 529. "Select the block to silently drop mathematical traffic from any of the signatures included in the entry"
upvoted 1 times
...
Windral
2 years, 1 month ago
Selected Answer: A
A is correct because action is "block" and not "default" on the rule
upvoted 1 times
...
EngelL
2 years, 2 months ago
Selected Answer: A
A is correct.
upvoted 1 times
...
Altimbo
2 years, 3 months ago
Selected Answer : A
upvoted 1 times
...
Pinchi
2 years, 3 months ago
Selected Answer: A
upvoted 1 times
...
aandreou020
2 years, 3 months ago
Selected Answer: A
Since the action is Blocked the answer is A
upvoted 1 times
...
MrSaintz
2 years, 4 months ago
Selected Answer: A
Action is drop, signature default action is listed only in the signature, it would only match if action was set to default.
upvoted 1 times
...
ScottXYZ
2 years, 4 months ago
I vote for A, by adding this signature it will overwrite the default setting with the Block action. Silent drop means it will break the TCP session state without sending a FIN to the sender.
upvoted 2 times
...
picasso701
2 years, 5 months ago
Selected Answer: A
A like others stated
upvoted 1 times
...
forti_Ctes
2 years, 5 months ago
A is correct, test in lab
upvoted 1 times
...
deepakkalri
2 years, 6 months ago
D is correct as it says traffic matching with IPS signature "FTP.login" and action is passed, all others will be dropped except matching signature FTP.loginfailed.
upvoted 2 times
...
Hasan2021
2 years, 6 months ago
D is the correct,,
upvoted 2 times
...
dragonwise
2 years, 8 months ago
In option A, does anyone really know what they mean by silently dropped considering that the blocked packets will be logged?
upvoted 2 times
studentc
2 years, 7 months ago
the client or server will not be notified for the dropped packet, maybe
upvoted 1 times
...
...
Zaiderr
2 years, 10 months ago
A is correct, Default signature action is ALLOW but Block will override it
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...