Fortinet Fortinet Specialist Exams FORTISANDBOX Questions & Answers

• Question 1:

  Which protocols are supported for archiving scan job reports? (Choose two.)

  A. CIFS

  B. NFSv2

  C. SMB

  D. FTP

  Correct Answer: AB

• Question 2:

  The Windows licenses in a FortiSandbox could be locked because they have exceeded the maximum

  number of allowed activations.

  What should the administrator do to fix the problem?

  A. Contact Microsoft support.

  B. Restore a backup of the configuration taken before the licenses became locked.

  C. Reinstall the license files.

  D. Contact Fortinet support.

  Correct Answer: D

• Question 3:

  Based on the exhibit, which files will be sent to FortiSandbox? (Choose three.)

  

  A. A 7 MB PDF attachment to an email, sent over SMTP.

  B. A 3 MB archive that decompresses to 16 MB, sent over HTTP.

  C. A 3 MB Flash video, sent over HTTP.

  D. An 11 MB EXE file, sent of HTTP, detected as suspicious.

  E. A 5 MB EXE file attached to an email, sent over POP3, detected as known malware.

  Correct Answer: ACD

• Question 4:

  On FortiMail which type of profile is used to configure when files are sent to a FortiSandbox?

  A. Content profile

  B. Antivirus profile

  C. Protocol options profile

  D. Antispam profile

  Correct Answer: B

• Question 5:

  What mechanism does FortiGate use to avoid sending a file that has been already inspected to FortiSandbox?

  A. FortiGate sends the file name to FortiGuard. FortiGuard checks if a file with that name has been already inspected.

  B. FortiGate sends the file name to FortiSandbox. FortiSandbox checks if it has already inspected a file with that name.

  C. FortiGate sends a hash of the file to FortiSandbox. FortiSandbox checks if it has already inspected a file with that hash.

  D. FortiGate searches its cache of a list of file names that it has already inspected.

  Correct Answer: B

• Question 6:

  Which devices can receive logs from FortiSandbox? (Choose two.)

  A. SNMP manager

  B. FortiAnalyzer

  C. FortiManager

  D. FortiGate

  Correct Answer: BD

• Question 7:

  Which are true about activating the Microsoft Office license in a FortiSandbox? (Choose two.)

  A. Happens simultaneously with the activation of the Windows licenses

  B. Does not require Internet access

  C. Requires that you download a license file from the Fortinet support website

  D. Requires you to enter the key in the FortiSandbox GUI

  Correct Answer: CD

• Question 8:

  Based on the exhibit, which are true? (Choose two.)

  

  A. Depending on the version indicated in the PDF file, FortiSandbox will scan using only one PDF reader (either Adobe Reader 9 or Adobe Reader 11).

  B. If there are no Internet Explorer 10 installations in your network, you can safely disable the scanning of Adobe Flash with Microsoft Internet Explorer 10.

  C. FortiSandbox will scan all Flash applications using Internet Explorer 10. This does not guarantee safety for Internet Explorer 8.

  D. You can safely disable the PDF scanning with Acrobat Reader 9 because PDF scanning with Acrobat Reader 11 is enabled.

  Correct Answer: AC

• Question 9:

  Which is true regarding Microsoft Office on FortiSandbox?

  A. Microsoft Word documents (.docx) are not inspected.

  B. Office 365 files are not supported.

  C. Microsoft Office is not included. You must purchase it separately, then manually install it in the applicable VMs on FortiSandbox.

  D. Office 2013 is installed in one of the VMs.

  Correct Answer: C

• Question 10:

  Which devices can be configured to send files to FortiSandbox 2.0.3? (Choose two.)

  A. FortiGate

  B. FortiMail

  C. FortiSwitch

  D. FortiAP

  Correct Answer: AB