AntiVirus II

Question 1 of 18

1

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

Uses the full antivirus database :
Normal, extended, or extreme—depending on what is configured in the CLI
Uses the normal antivirus database :
Normal, extended, or extreme—depending on what is configured in the CLI

Explanation

Question 2 of 18

1

Flow-Based Inspection Mode—Full Scan Mode (Select 2)

Select one or more of the following:

Optimized performance compare to proxy-based scan
Optimized performance compare to flow-based scan
FortiGate buffers the whole file, but transmits to the client simultaneously.
FortiGate buffers only a part of the file, and not transmits to the client simultaneously.

Explanation

Question 3 of 18

1

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

When the last packet arrives, the AV engine starts the scan.
Files bigger than buffer size are not scanned—can enable logging of these files.
Packets are not delayed by scan—exceptlastpacket.
Lower perceived latency-data loads faster
When the first packet arrives, the AV engine starts the scan.
Files bigger than buffer size are scanned— can´t enable logging of these files.
Packets are not delayed by scan—except first packet.
Faster perceived latency-data loads lower

Explanation

Question 4 of 18

1

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

If a virus is detected, the last packet is dropped and the connection is reset. If an identical request is made, the block replacement page is inserted immediately.
If a virus is detected, the first packet is dropped and the connection is reset. If an identical request is made, the block replacement page is inserted again.

Explanation

Question 5 of 18

1

When the antivirus profile is operating in proxy inspection mode, two scanning mode options are available

Select one of the following:

True
False

Explanation

Question 6 of 18

1

When the antivirus profile is operating in flow-based inspection mode, two scanning mode options are available:

Select one of the following:

full scan mode
quick scan mode
full scan mode
medium scan mode

Explanation

Question 7 of 18

1

Because the ﬁle is transmitted simultaneously, ﬂow inspection mode scanning consumes more CPU cycles.

Select one of the following:

True
False

Explanation

Question 8 of 18

1

?

Select one of the following:

Full scan
Quick scan

Explanation

Question 9 of 18

1

Regardless of which mode you use, the scan techniques give similar detection rates. How can you choose between the scan engines? If performance is your top priority:

Select one of the following:

then ﬂow inspection mode is more appropriate. If security is your priority, proxy inspection mode—with client comforting disabled—is more appropriate.
then proxy inspection mode is more appropriate. If security is your priority, ﬂow inspection mode—with client comforting disabled—is more appropriate.

Explanation

Question 10 of 18

1

Uses the IPS engine and embedded compact antivirus database
Faster, less memory usage because the file is not cached, but lower catching rate
Cannot send files to FortiSandbox for inspection
Cannot use advanced heuristics and mobile malware package

Select one of the following:

Quick Scan Mode Packet Flow
Full Scan Mode Packet Flow

Explanation

Question 11 of 18

1

The quick scan mode option is only available in proxy inspection mode.

Select one of the following:

True
False

Explanation

Question 12 of 18

1

Some entry-level FortiGate models don’t support quick scan flow-based inspection method.

Select one of the following:

True
False

Explanation

Question 13 of 18

1

?

Select one of the following:

Quick scan
Full scan

Explanation

Question 14 of 18

1

?

Select one of the following:

Proxy inspection mode
flow-based inspection mode

Explanation

Question 15 of 18

1

?

Select one of the following:

Proxy Inspection Mode Packet Flow
Flow-based Inspection Mode Packet Flow

Explanation

Question 16 of 18

1

	Created by Marcos Avila over 5 years ago

NSE4 6.0 NSE4 6.0 Quiz on AntiVirus II, created by Marcos Avila on 11/09/2018.

AntiVirus II

Question 1 of 18

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

Explanation

Question 2 of 18

Flow-Based Inspection Mode—Full Scan Mode (Select 2)

Select one or more of the following:

Explanation

Question 3 of 18

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

Explanation

Question 4 of 18

Flow-Based Inspection Mode—Full Scan Mode

Select one of the following:

Explanation

Question 5 of 18

When the antivirus profile is operating in proxy inspection mode, two scanning mode options are available

Select one of the following:

Explanation

Question 6 of 18

When the antivirus profile is operating in flow-based inspection mode, two scanning mode options are available:

Select one of the following:

Explanation

Question 7 of 18

Because the ﬁle is transmitted simultaneously, ﬂow inspection mode scanning consumes more CPU cycles.

Select one of the following:

Explanation

Question 8 of 18

?

Select one of the following:

Explanation

Question 9 of 18

Regardless of which mode you use, the scan techniques give similar detection rates. How can you choose between the scan engines? If performance is your top priority:

Select one of the following:

Explanation

Question 10 of 18

Uses the IPS engine and embedded compact antivirus database Faster, less memory usage because the file is not cached, but lower catching rate Cannot send files to FortiSandbox for inspection Cannot use advanced heuristics and mobile malware package

Select one of the following:

Explanation

Question 11 of 18

The quick scan mode option is only available in proxy inspection mode.

Select one of the following:

Explanation

Question 12 of 18

Some entry-level FortiGate models don’t support quick scan flow-based inspection method.

Select one of the following:

Explanation

Question 13 of 18

?

Select one of the following:

Explanation

Question 14 of 18

?

Select one of the following:

Explanation

Question 15 of 18

?

Select one of the following:

Explanation

Question 16 of 18

?

Select one of the following:

Explanation

Question 17 of 18

What two scanning modes are available in flow-based inspection mode? 8.

Select one of the following:

Explanation

Question 18 of 18

What antivirus database does quick scan mode use?

Select one of the following:

Explanation

Uses the IPS engine and embedded compact antivirus database
Faster, less memory usage because the file is not cached, but lower catching rate
Cannot send files to FortiSandbox for inspection
Cannot use advanced heuristics and mobile malware package