By default, how is traffic evaluated when the antivirus database update is in progress?
A.
Traffic is scanned against the old database.
B.
Traffic is scanned against the existing portion of the currently downloaded database.
C.
All traffic that requires antivirus inspection is dropped and a log message generated displaying the traffic endpoints.
D.
All traffic that requires antivirus inspection is forwarded with no antivirus inspection and a log message generated displaying the traffic endpoints.
Engine not ready default action is block. Can someone explain why answer is D? I think it should be C.
According to: http://www.juniper.net/us/en/local/pdf/app-notes/3500158-en.pdf
Page 9:
The default configuration of the Kaspersky engine checks for database updates every hour. By default, if a database upgrade is in process while traffic needs to be inspected, the scan engine will permit the traffic and generate a log message displaying the traffic endpoints, an error message, and the name of the file (or URL in case of an HTTP request).
I choose D