On your FortiGate 60D, you’ve configured firewall policies. They port forward traffic to your Linux Apache web server. Select the best way to protect your web server
by using the IPS engine.

A.
Enable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache applications. Configured DLP to block HTTP GET request with credit
card numbers.

B.
Enable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache applications. Configure DLP to block HTTP GET with credit card
numbers. Also configure a DoS policy to prevent TCP SYn floods and port scans.

C.
None. FortiGate 60D is a desktop model, which does not support IPS.

D.
Enable IPS signatures for Linux and windows servers with FTP, HTTP, TCP, and SSL protocols and Apache and PHP applications.

Explanation:
http://docs.fortinet.com/uploaded/files/2181/fortigate-security-profiles-guide-524.pdf