Quiz
AntiVirus II
Perguntas do quiz (18)
1Flow-Based Inspection Mode—Full Scan Mode
- AUses the full antivirus database :
Normal, extended, or extreme—depending on what is configured in the CLI - BUses the normal antivirus database :
Normal, extended, or extreme—depending on what is configured in the CLI
- AUses the full antivirus database :
2Flow-Based Inspection Mode—Full Scan Mode (Select 2)
- AOptimized performance compare to proxy-based scan
- BOptimized performance compare to flow-based scan
- CFortiGate buffers the whole file, but transmits to the client simultaneously.
- DFortiGate buffers only a part of the file, and not transmits to the client simultaneously.
3Flow-Based Inspection Mode—Full Scan Mode
- AWhen the last packet arrives, the AV engine starts the scan.
Files bigger than buffer size are not scanned—can enable logging of these files.
Packets are not delayed by scan—exceptlastpacket.
Lower perceived latency-data loads faster - BWhen the first packet arrives, the AV engine starts the scan.
Files bigger than buffer size are scanned— can´t enable logging of these files.
Packets are not delayed by scan—except first packet.
Faster perceived latency-data loads lower
- AWhen the last packet arrives, the AV engine starts the scan.
4Flow-Based Inspection Mode—Full Scan Mode
- AIf a virus is detected, the last packet is dropped and the connection is reset. If an identical request is made, the block replacement page is inserted immediately.
- BIf a virus is detected, the first packet is dropped and the connection is reset. If an identical request is made, the block replacement page is inserted again.
5When the antivirus profile is operating in proxy inspection mode, two scanning mode options are available
- AVerdadeiro
- BFalso
6When the antivirus profile is operating in flow-based inspection mode, two scanning mode options are available:
- Afull scan mode
quick scan mode - Bfull scan mode
medium scan mode
- Afull scan mode
7Because the file is transmitted simultaneously, flow inspection mode scanning consumes more CPU cycles.
- ATrue
- BFalse
8?
- AFull scan
- BQuick scan
9Regardless of which mode you use, the scan techniques give similar detection rates. How can you choose between the scan engines? If performance is your top priority:
- Athen flow inspection mode is more appropriate. If security is your priority, proxy inspection mode—with client comforting disabled—is more appropriate.
- Bthen proxy inspection mode is more appropriate. If security is your priority, flow inspection mode—with client comforting disabled—is more appropriate.
10Uses the IPS engine and embedded compact antivirus database
Faster, less memory usage because the file is not cached, but lower catching rate
Cannot send files to FortiSandbox for inspection
Cannot use advanced heuristics and mobile malware package- AQuick Scan Mode Packet Flow
- BFull Scan Mode Packet Flow
11The quick scan mode option is only available in proxy inspection mode.
- AVerdadeiro
- BFalso
12Some entry-level FortiGate models don’t support quick scan flow-based inspection method.
- AVerdadeiro
- BFalso
13?
- AQuick scan
- BFull scan
14?
- AProxy inspection mode
- Bflow-based inspection mode
15?
- AProxy Inspection Mode Packet Flow
- BFlow-based Inspection Mode Packet Flow
16?
- AFull flow-based
Quick flow-based
Proxy-based - BProxy-based
Full flow-based
Quick flow-based - CQuick flow-based
Proxy-based
Full flow-based
- AFull flow-based
17What two scanning modes are available in flow-based inspection mode? 8.
- AA. Proxy and NGFW
- BB. Full and quick
18What antivirus database does quick scan mode use?
- AA. Compact
- BB. Extended
Informações
- Descrição
- NSE4 6.0 NSE4 6.0 Quiz sobre AntiVirus II, criado por Marcos Avila em 11-09-2018.
- Autor
- Marcos Avila
- Idioma
- Español
- Visualizações
- 280
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz