StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Antivirus

Practice question 294 of 440 · medium

A test download is stopped by endpoint AV and there is no correlated FortiGate virus event. What has the test established?

Choose the single best answer.

  1. A.FortiGate AV necessarily blocked it first
  2. B.FortiGate AV is necessarily disabled
  3. C.Every firewall policy is correctly configured
  4. D.Endpoint protection acted, but FortiGate AV enforcement is not demonstrated
Show the answer and explanation

✓ Correct answer

  • Endpoint protection acted, but FortiGate AV enforcement is not demonstrated

The endpoint result does not establish the FortiGate verdict. Missing evidence cannot prove either correct firewall enforcement or that AV is disabled.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.