Exam NSE8_811 topic 1 question 57 discussion

Actual exam question from Fortinet's NSE8_811

Question #: 57
Topic #: 1

Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile. You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.
Referring to the exhibit, how can this be fixed?

A. Change the set scan-mode configuration to full.
B. Disable the emulator feature.
C. Change the set default-db configuration to extreme.
D. Add set content-disarm enable to the configuration.

Show Suggested Answer

Suggested Answer: A 🗳️

by Sb_2021 at Jan. 21, 2022, 1:55 p.m.

Comments

Submit Cancel

aioross

2 years, 6 months ago

Correct: A

upvoted 1 times

...

kinge2

2 years, 8 months ago

Selected Answer: A

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/100953/inspection-mode-differences-for-antivirus

upvoted 2 times

...

Sb_2021

3 years, 3 months ago

Selected Answer: A

Flow Quick mode uses a separate pre-filtering database for malware detection as opposed to the full AV signature database that Flow Full and Proxy mode inspection use.

upvoted 2 times

...

Exam NSE8_811 All Questions

View all questions & answers for the NSE8_811 exam

Exam NSE8_811 topic 1 question 57 discussion

Comments

aioross

kinge2

Sb_2021

SY0-701