ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam FCSS_EFW_AD-7.4 All Questions

View all questions & answers for the FCSS_EFW_AD-7.4 exam
Go to Exam

Exam FCSS_EFW_AD-7.4 topic 1 question 4 discussion

Actual exam question from Fortinet's FCSS_EFW_AD-7.4
Question #: 4
Topic #: 1
[All FCSS_EFW_AD-7.4 Questions]

An administrator needs to install an IPS profile without triggering false positives that can impact applications and cause problems with the user's normal traffic flow.
Which action can the administrator take to prevent false positives on IPS analysis?

  • A. Use the IPS profile extension to select an operating system, protocol, and application for all the network internal services and users to prevent false positives.
  • B. Enable Scan Outgoing Connections to avoid clicking suspicious links or attachments that can deliver botnet malware and create false positives.
  • C. Use an IPS profile with action monitor, however, the administrator must be aware that this can compromise network integrity.
  • D. Install missing or expired SSL/TLS certificates on the client PC to prevent expected false positives.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by 79cab4d at March 19, 2025, 8:45 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Tweefo
6 days, 3 hours ago
Selected Answer: C
C is the correct answer
upvoted 1 times
...
Yaghu
1 week, 6 days ago
Selected Answer: C
EFW Admin 7.4 Study Guide, p. 175
upvoted 1 times
...
79cab4d
2 weeks ago
Selected Answer: C
Study guide page 176 (?)
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago