Fortinet NSE7_ATP-2.5 Free Practice Questions

NEW QUESTION 1
Examine the FortiGate antivirus log detail shown in the exhibit, then answer the following question:

Which of the following statements is true?

• A. FortiGate quarantined the file as a malware.
• B. The file matched a FortiSandbox-generated malware signature.
• C. The file was downloaded from www.fortinet.com.
• D. The FSA/RISK_HIGH verdict was generated by FortiSandbox.

Answer: B

NEW QUESTION 2
FortiSandbox generates structured threat information exchange (STIX) packages for which of the following threats? (Choose two.)

• A. Botnet connections
• B. Malware
• C. Intrusion attempts
• D. Malicious URLs

Answer: BD

NEW QUESTION 3
Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?

• A. The file contained a malicious image file.
• B. The file contained malicious JavaScript.
• C. The file contained a malicious macro.
• D. The file contained a malicious URL.

Answer: B

NEW QUESTION 4
Which FortiSandbox interfaces can you use for sniffer mode? (Choose two.)

• A. port2
• B. port3
• C. port1
• D. port4

Answer: AD

NEW QUESTION 5
Examine the Suspicious Indicators section of the scan job shown in the exhibit, then answer the following question:

Which FortiSandbox component identified the vulnerability exploits?

• A. VM scan
• B. Antivirus scan
• C. Static analysis
• D. Cache check

Answer: C

NEW QUESTION 6
What information does a scan job report include? (Choose two.)

• A. Updates to the antivirus database
• B. Summary of the file activity
• C. Details about system files deleted of modified
• D. Changes to the FortiSandbox configuration

Answer: BC

NEW QUESTION 7
Which samples can FortiClient submit to FortiSandbox for analysis? (Choose two.)

• A. Downloads from emails
• B. URLs from web requests
• C. Command and control traffic
• D. Files from removable storage

Answer: AC

NEW QUESTION 8
Examine the scan job report shown in the exhibit, then answer the following question:

Which of the following statements are true regarding this verdict? (Choose two.)

• A. The file contained malicious JavaScipt.
• B. The file contained a malicious macro.
• C. The file was sandboxed in two-guest VMs.
• D. The file was extracted using sniffer-mode inspection.

Answer: CD

NEW QUESTION 9
......