NSE 4 – FortiGate 6.2 — Question 28

Which two statements about antivirus scanning mode are true? (Choose two.)

Answer options

• A. In proxy-based inspection mode, antivirus buffers the whole file for scanning, before sending it to the client.
• B. In full scan flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
• C. In proxy-based inspection mode, files bigger than the buffer size are scanned.
• D. In quick scan mode, you can configure antivirus profiles to use any of the available antivirus signature databases.

Correct answer: A, B

Explanation

Option A is correct as it accurately describes how proxy-based inspection works by buffering the entire file for scanning. Option B is also correct because it explains that in full scan flow-based mode, buffering and transmission occur simultaneously. Options C and D are incorrect; C misrepresents how files larger than the buffer are handled, and D incorrectly suggests that any signature database can be used in quick scan mode.