NSE 4 – FortiGate 7.2 — Question 54

Which two statements explain antivirus scanning modes? (Choose two.)

Answer options

• A. In flow-based inspection mode, files bigger than the buffer size are scanned.
• B. In proxy-based inspection mode, files bigger than the buffer size are scanned.
• C. In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
• D. In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.

Correct answer: C, D

Explanation

Option C is correct because flow-based inspection allows simultaneous transmission and buffering of the file. Option D is also correct as proxy-based inspection requires the entire file to be buffered for scanning prior to being sent to the client. Options A and B are incorrect as they inaccurately describe the behavior of flow-based and proxy-based inspection modes regarding file size scanning.