nse5_fct-70 Exam - Question 14

Question

Refer to the exhibit. Based on the settings shown in the exhibit, which statement about FortiClient behaviour is true?

Examice · Accepted Answer

Based on the settings shown, FortiClient scans files as they are downloaded or copied to the system, but it excludes the specified Resources folder from scanning. This rules out any option suggesting that files in this folder are scanned or copied there without scanning. FortiClient typically quarantines infected files for review later after scanning them; thus, the statement that best reflects FortiClient's behavior is that it quarantines infected files and reviews them later, after scanning them.

Tomer676 · Answer

The Answer Is C
The FortiClient does not delete the file, it quarantines the file for its inspection, then after X days it is deleted

tachy_22 · Answer

C is correct. 
Resources Folder is excluded in the Full Scan so B and D are false. If Full Scan detects infected file moves to the quarantine so A is false too.

baasjasper · Answer

among the options provided, the statement that aligns with typical FortiClient behavior is:

C. FortiClient quarantines infected files and reviews them later after scanning them.

BrunoLu · Answer

Resources folder is exclude,so it will  not scan

Eggrolls · Answer

Answer seems C not A

Action On Virus Discovery

Warn the User If a Process Attempts to Access Infected Files
Quarantine Infected Files. You can use FortiClient to view, restore, or delete the quarantined file, as well as view the virus name, submit the file to FortiGuard, and view logs.
Deny Access to Infected Files
Ignore Infected Files

foobarasdf123 · Answer

Should be B. See study Guide FCT7.0 p. 184
"If you want to exclude specific files or folders from the anti virus scan, but still want to perform an antivirus scan on the rest of the system, you can configure an exclusion list. The files and folders that you add to this list are excluded from antivirus scanning."

mda2h · Answer

I correct my previous answer
B. is false, it's not FortiClient that copies the file, the OS does it

Answer is C

jmunr88 · Answer

C is correct page 186

mda2h · Answer

A. False = what is deleted in Full Scan are rootkits, while files are only scanned
C. False= two choices when infected fiels is detected: deny access or quarantine. If choose quarantine, multiple options are possible including, restore, delete, submit to FortiGuard ...etc default action is not to rescan later
D. False = the folder is in the exclusion list, files/folders added there are not scanned

piipo · Answer

Answer Is C

nse5_fct-70 Exam - Question 14

Discussion