NSE 5 – Network Security Analyst — Question 5

A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Answer options

• A. Proxy
• B. DNS
• C. Flow-based
• D. Man-in-the-middle

Correct answer: C

Explanation

The correct answer is C, Flow-based, as it allows the FortiGate device to scan for viruses in real-time across multiple protocols. The Proxy mode (A) is typically used for more controlled traffic inspection, while DNS (B) is not applicable for virus scanning, and Man-in-the-middle (D) does not specifically relate to the scanning of these protocols.