StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Intrusion prevention

Practice question 313 of 440 · medium

A C&C event identifies a known malicious destination IP on encrypted traffic without deep inspection. Which conclusion is justified?

Choose the single best answer.

  1. A.Destination IP reputation can act without decrypted payload
  2. B.Every encrypted exploit payload was fully inspected
  3. C.A DNS domain block necessarily caused the event
  4. D.The endpoint was sanitized by CDR
Show the answer and explanation

✓ Correct answer

  • Destination IP reputation can act without decrypted payload

IP reputation can operate on visible destination addresses. Full payload inspection, DNS enforcement and document sanitization do not follow.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.