A client has a correct address but fails at the network layer. Which three checks should precede changing malware signatures? Select three answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Link/error and VLAN conditions
B.ARP/neighbour resolution to the intended next hop
C.Forward and return route selection
D.Only the IPS signature update date
E.Only the web-filter category override

Show the answer and explanation

✓ Correct answers

Link/error and VLAN conditions
ARP/neighbour resolution to the intended next hop
Forward and return route selection

Physical/logical connectivity, neighbor resolution and bidirectional routing must work before content controls can matter. Signature dates and category overrides do not repair a network-layer path.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.