StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Antivirus

Practice question 285 of 440 · medium

Oversized-file logging is enabled and a transfer completes. What is needed before concluding it was fully scanned?

Choose the single best answer.

  1. A.Inspect oversize action and the actual scanner path.
  2. B.Assume every logged oversize event is a block.
  3. C.Read only the forward traffic Accept action.
  4. D.Treat successful delivery as proof all archive contents were scanned.
Show the answer and explanation

✓ Correct answer

  • Inspect oversize action and the actual scanner path.

An oversize log does not establish complete scanning or blocking. Inspect the effective action and scanner path; traffic acceptance and completed delivery alone do not prove archive coverage.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.