Which two statements are correct on a FortiGate using the FortiGuard Outbreak Protection Service (VOS)? (Choose two.)
Suggested Answer: C, E
Get Premium NSE8_812 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
C . The antivirus database queries FortiGuard with the hash of a scanned file. This is how the FortiGuard VOS service works. The FortiGate queries FortiGuard with the hash of a scanned file, and FortiGuard returns a list of known malware signatures that match the hash.
E . The hash signatures are obtained from the FortiGuard Global Threat Intelligence database. This is where the FortiGuard VOS service gets its hash signatures from. The FortiGuard Global Threat Intelligence database is updated regularly with new malware signatures.
26 comments · newest first
AN
Annalee
10 months ago
B seems a bit extreme, doesn't it?
TI
Tish
10 months ago
Wait, are we sure about A? That sounds off.
TA
Talia
10 months ago
Totally agree with C!
UN
Una
10 months ago
I think C and E are the right answers.
BO
Bobbie
10 months ago
D is definitely a must for VOS to work.
CH
Cheryl
11 months ago
I think option C is correct because it makes sense that the antivirus database would query FortiGuard with the file hash, but I’m not 100% confident.
MA
Mattie
11 months ago
I have a vague recollection that the hash signatures come from FortiGuard, so option E sounds familiar, but I can't quite recall the details.
AR
Arminda
11 months ago
I remember practicing a question about how the AV engine interacts with FortiGuard, so I feel like option D is definitely one of the answers.
ME
Meaghan
11 months ago
I think option A might be correct, but I'm not entirely sure if VOS can work with other types of inspections too.
CO
Coral
12 months ago
This is a good test of my knowledge on the FortiGuard VOS feature. I'm confident I can identify the two correct statements.
JE
Jesusita
12 months ago
I'm a bit confused by the difference between the AV database and the FortiGuard Global Threat Intelligence database. I'll need to review that part before answering.
LE
Leigha
12 months ago
Okay, I think I've got a good handle on how the FortiGuard VOS works. I'm ready to select the two correct statements.
RA
Raylene
1 year ago
Hmm, the wording on some of these options is a bit tricky. I'll need to read through them carefully to determine which two are correct.
ST
Stephanie
1 year ago
This question seems straightforward, but I want to make sure I understand the FortiGuard Outbreak Protection Service (VOS) correctly before selecting the answers.
CE
Cecilia
1 year ago
I'm not sure about A. Can someone explain why the FortiGuard VOS can be used only with proxy-base policy inspections?
LU
Lucina
1 year ago
Haha, Helaine's got a point. These certification exams love their trick questions. But I think Tammy and Gail are on the right track with B and E.
HE
Helaine
1 year ago
Ha! I bet the exam writers thought they could trick us with that one. Obviously, D is the key - you need the AV engine enabled to use the FortiGuard VOS feature.
AS
Asha
1 year ago
I think C is also correct, the antivirus database queries FortiGuard with the hash of a scanned file.
AS
Asha
1 year ago
I agree, D is definitely one of the correct statements.
DO
Dortha
1 year ago
I agree with you, Lacey. I also believe E is correct because the hash signatures are obtained from the FortiGuard Global Threat Intelligence database.
GA
Gail
1 year ago
I agree with Tammy. C and E seem to be the right choices here. The AV engine queries the FortiGuard database using the file hash.
TA
Tammy
1 year ago
Hmm, I think B and E are the correct answers. The FortiGuard VOS uses the FortiGuard database to detect malicious files, not just third-party AV.
TH
Thea
1 year ago
That's right, if a match is found in the FortiGuard database, the file is considered malicious.
GA
Gaston
1 year ago
Yes, the hash signatures are obtained from the FortiGuard Global Threat Intelligence database.
ME
Merissa
1 year ago
I agree, B and E are the correct answers. The FortiGuard VOS uses the FortiGuard database for detection.
LA
Lacey
1 year ago
I think C is correct because the antivirus database queries FortiGuard with the hash of a scanned file.