Practice question 302 of 440 · medium
Which two observations specifically point to size or decompression limits in the AV scan envelope? Select two answers.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Logs indicate a decompression limit was reached.
- Only files above the oversize threshold pass without detection.
Decompression-limit events and threshold-dependent results point to the scan envelope. An old signature package or consistently missing HTTPS decryption requires a different investigation; neither establishes a size/decompression boundary.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.