ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE4_FGT-6.2 All Questions

View all questions & answers for the NSE4_FGT-6.2 exam
Go to Exam

Exam NSE4_FGT-6.2 topic 1 question 68 discussion

Actual exam question from Fortinet's NSE4_FGT-6.2
Question #: 68
Topic #: 1
[All NSE4_FGT-6.2 Questions]

Refer to the exhibit.


The exhibit shows the IPS sensor configuration and forward traffic logs.
An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt, or not.
After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

  • A. The HTTPS signatures have not been added to the sensor.
  • B. The IPS filter is missing the Protocol:HTTPS option.
  • C. The firewall policy is not using a full SSL inspection profile.
  • D. A DoS policy should be used, instead of an IPS sensor.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by pollyy at Feb. 19, 2021, 9:37 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
akkarin
Highly Voted 4 years ago
Security manual page 555 suggests that deep packet inspection is required to reliably detect attacks in encrypted traffic. Answer C makes sense once dealing with SSL traffic, FortiGate expects you to enable full SSL inspection.
upvoted 5 times
Gallego
3 years, 4 months ago
Agreed. As you apply filters to "servers" and "windows", a lot of signatures are put in place to block it. As said in the statement, no logs were generated, so no full SSL inspection is enable.
upvoted 1 times
...
...
Vir
Most Recent 4 years ago
The Security Manual talk a lot about signatures, so that the reason I belive is answer A
upvoted 1 times
...
rhylos
4 years, 1 month ago
what page is this in the security manual? Why not A?
upvoted 1 times
...
Murilodsant
4 years, 1 month ago
C is correct
upvoted 3 times
...
pollyy
4 years, 2 months ago
B is correct
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago