StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Antivirus

Practice question 298 of 440 · medium

A proxy begins sending client-comforting bytes, then AV detects malware. The browser receives a partial file and a reset. What should be examined?

Choose the single best answer.

  1. A.Treat only the missing replacement page as proof detection failed.
  2. B.Assume partial delivery proves the malware was fully allowed.
  3. C.Disable client comforting without examining the recorded virus action.
  4. D.The virus event and configured transfer behavior.
Show the answer and explanation

✓ Correct answer

  • The virus event and configured transfer behavior.

Client comforting can release some data before detection, followed by a reset. Correlate the virus event with the configured transfer behavior. Partial delivery and no replacement page do not prove an allowed verdict; changing comforting first skips the action evidence.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.