StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Intrusion prevention

Practice question 325 of 440 · medium

Which two actions preserve broader coverage while investigating one false positive? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Use a justified narrow IP exemption on the individual signature
  2. B.Place a narrow exception before an overlapping broad entry
  3. C.Remove IPS from every policy
  4. D.Assume all internal applications are harmless
Show the answer and explanation

✓ Correct answers

  • Use a justified narrow IP exemption on the individual signature
  • Place a narrow exception before an overlapping broad entry

Narrow exemptions and correct ordering limit the exception. Removing all profiles and trusting location discard coverage without isolating the cause.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.