NSE 4 – FortiGate 5.4 — Question 59

Which statement concerning IPS is false?

Answer options

• A. IPS packages contain an engine and signatures used by both IPS and other flow-based scans.
• B. One-arm topology with sniffer mode improves performance of IPS blocking.
• C. IPS can detect zero-day attacks.
• D. The status of the last service update attempt from FortiGuard IPS is shown on System>Config>FortiGuard and in output from 'diag autoupdate version'

Correct answer: D

Explanation

Option D is incorrect because the status of the last service update attempt from FortiGuard IPS is actually not displayed in that manner. Options A, B, and C are accurate statements about IPS capabilities and configurations, making them true.