Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE8_812 Exam - Topic 2 Question 49 Discussion

Posted by Mary on Jul 09, 2025 at 01:45 AM

Which two statements are correct on a FortiGate using the FortiGuard Outbreak Protection Service (VOS)? (Choose two.)

Suggested Answer: C, E

C . The antivirus database queries FortiGuard with the hash of a scanned file. This is how the FortiGuard VOS service works. The FortiGate queries FortiGuard with the hash of a scanned file, and FortiGuard returns a list of known malware signatures that match the hash.

E . The hash signatures are obtained from the FortiGuard Global Threat Intelligence database. This is where the FortiGuard VOS service gets its hash signatures from. The FortiGuard Global Threat Intelligence database is updated regularly with new malware signatures.

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/889364/fortiguard-outbreak-prevention


Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
26 comments · newest first
AN
Annalee 10 months ago
B seems a bit extreme, doesn't it?
TI
Tish 10 months ago
Wait, are we sure about A? That sounds off.
TA
Talia 10 months ago
Totally agree with C!
UN
Una 10 months ago
I think C and E are the right answers.
BO
Bobbie 10 months ago
D is definitely a must for VOS to work.
CH
Cheryl 11 months ago
I think option C is correct because it makes sense that the antivirus database would query FortiGuard with the file hash, but I’m not 100% confident.
MA
Mattie 11 months ago
I have a vague recollection that the hash signatures come from FortiGuard, so option E sounds familiar, but I can't quite recall the details.
AR
Arminda 11 months ago
I remember practicing a question about how the AV engine interacts with FortiGuard, so I feel like option D is definitely one of the answers.
ME
Meaghan 11 months ago
I think option A might be correct, but I'm not entirely sure if VOS can work with other types of inspections too.
CO
Coral 12 months ago
This is a good test of my knowledge on the FortiGuard VOS feature. I'm confident I can identify the two correct statements.
JE
Jesusita 12 months ago
I'm a bit confused by the difference between the AV database and the FortiGuard Global Threat Intelligence database. I'll need to review that part before answering.
LE
Leigha 12 months ago
Okay, I think I've got a good handle on how the FortiGuard VOS works. I'm ready to select the two correct statements.
RA
Raylene 1 year ago
Hmm, the wording on some of these options is a bit tricky. I'll need to read through them carefully to determine which two are correct.
ST
Stephanie 1 year ago
This question seems straightforward, but I want to make sure I understand the FortiGuard Outbreak Protection Service (VOS) correctly before selecting the answers.
CE
Cecilia 1 year ago
I'm not sure about A. Can someone explain why the FortiGuard VOS can be used only with proxy-base policy inspections?
LU
Lucina 1 year ago
Haha, Helaine's got a point. These certification exams love their trick questions. But I think Tammy and Gail are on the right track with B and E.
HE
Helaine 1 year ago
Ha! I bet the exam writers thought they could trick us with that one. Obviously, D is the key - you need the AV engine enabled to use the FortiGuard VOS feature.
AS
Asha 1 year ago
↳ replying to Helaine
I think C is also correct, the antivirus database queries FortiGuard with the hash of a scanned file.
AS
Asha 1 year ago
↳ replying to Helaine
I agree, D is definitely one of the correct statements.
DO
Dortha 1 year ago
I agree with you, Lacey. I also believe E is correct because the hash signatures are obtained from the FortiGuard Global Threat Intelligence database.
GA
Gail 1 year ago
I agree with Tammy. C and E seem to be the right choices here. The AV engine queries the FortiGuard database using the file hash.
TA
Tammy 1 year ago
Hmm, I think B and E are the correct answers. The FortiGuard VOS uses the FortiGuard database to detect malicious files, not just third-party AV.
TH
Thea 1 year ago
↳ replying to Tammy
That's right, if a match is found in the FortiGuard database, the file is considered malicious.
GA
Gaston 1 year ago
↳ replying to Tammy
Yes, the hash signatures are obtained from the FortiGuard Global Threat Intelligence database.
ME
Merissa 1 year ago
↳ replying to Tammy
I agree, B and E are the correct answers. The FortiGuard VOS uses the FortiGuard database for detection.
LA
Lacey 1 year ago
I think C is correct because the antivirus database queries FortiGuard with the hash of a scanned file.
0/2000 characters

Save Cancel