Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam FCP_FCT_AD-7.2 Topic 1 Question 5 Discussion

Actual exam question for Fortinet's FCP_FCT_AD-7.2 exam
Question #: 5
Topic #: 1
[All FCP_FCT_AD-7.2 Questions]

Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

Show Suggested Answer Hide Answer
Suggested Answer: D

Block Malicious Website has nothing to do with infected files. Since Realtime Protection is OFF, it will be allowed without being scanned.

Based on the settings shown in the exhibit:

Realtime Protection: OFF

Dynamic Threat Detection: OFF

Block malicious websites: ON

Threats Detected: 75

The 'Realtime Protection' setting is crucial for preventing infected files from being downloaded and executed. Since 'Realtime Protection' is OFF, FortiClient will not actively scan files being downloaded. The setting 'Block malicious websites' is intended to prevent access to known malicious websites but does not scan files for infections.

Therefore, when a user tries to download an infected file, FortiClient will allow the file to download without scanning it due to the Realtime Protection being OFF.

Reference

FortiClient EMS 7.2 Study Guide, Antivirus Protection Section

Fortinet Documentation on FortiClient Real-time Protection Settings


Contribute your Thoughts:

Tammy
6 months ago
Haha, D? Really? I'd like to see the person who thinks letting an infected file download is a good idea. That's like putting a rattlesnake in your pocket and hoping for the best.
upvoted 0 times
Refugia
5 months ago
B) Quarantines the infected files and logs all access attempts
upvoted 0 times
...
Loreen
5 months ago
A) Blocks the infected files as it is downloading
upvoted 0 times
...
...
Dalene
6 months ago
I'm going with A. If FortiClient can't stop the infected file, what's the point of having it in the first place? Might as well just throw the whole computer out the window.
upvoted 0 times
...
Becky
6 months ago
Definitely A. I can't believe anyone would think it's a good idea to let the infected file download. That's just asking for trouble!
upvoted 0 times
Kanisha
5 months ago
Sending the infected file to FortiGuard for analysis could help prevent future threats.
upvoted 0 times
...
Glory
5 months ago
Quarantining and logging access attempts is also a good idea.
upvoted 0 times
...
Myra
6 months ago
I agree, blocking the infected file is the safest option.
upvoted 0 times
...
...
Rosendo
6 months ago
I disagree, I believe the correct answer is B) Quarantines the infected files and logs all access attempts.
upvoted 0 times
...
Elsa
6 months ago
I think the answer is A) Blocks the infected files as it is downloading.
upvoted 0 times
...
Michell
6 months ago
The correct answer is A. FortiClient should block the infected file as it's downloading. Anything else would be a security risk.
upvoted 0 times
Emily
5 months ago
B) Quarantines the infected files and logs all access attempts
upvoted 0 times
...
Colette
5 months ago
I agree, blocking the infected file is the best option for security.
upvoted 0 times
...
Amber
5 months ago
A) Blocks the infected files as it is downloading
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77