Fortinet Fortinet Specialist Exams FORTISANDBOX Questions & Answers

• Question 11:

  Which methods can be used to submit files to FortiSandbox for inspection? (Choose two.)

  A. File shares

  B. FTP upload

  C. SFTP upload

  D. JSON API

  Correct Answer: AD

• Question 12:

  Which threats can a FortiSandbox inspect when it is deployed in sniffer mode? (Choose three.)

  A. Suspicious website access

  B. Botnet connections

  C. Applications that use excessive bandwidth

  D. Known viruses

  E. Spam

  Correct Answer: ABE

• Question 13:

  Which protocols can a FortiSandbox inspect when is deployed in sniffer mode? (Choose two.)

  A. MAPI

  B. FTPS

  C. HTTP

  D. POP3

  Correct Answer: CD

• Question 14:

  Which protocols can FortiSandbox use to connect to a network file share? (Choose two.)

  A. FTP

  B. HTTP

  C. NFSv2

  D. CIFS

  Correct Answer: AB

• Question 15:

  When does a FortiSandbox categorize a file as suspicious?

  A. When the file is detected as known greyware

  B. When the file matches an antivirus signature that might detect false positives

  C. When the file matches a signature in the extended antivirus database

  D. When the file is not detected as a known malware, but it has some of the same behaviors as malware

  Correct Answer: D

• Question 16:

  Which browser is installed in the Windows 7 x86 VM image?

  A. Internet Explorer 9

  B. Firefox

  C. Google Chrome

  D. Internet Explorer 10

  Correct Answer: A

• Question 17:

  What is the minimum FortiAnalyzer firmware version that supports FortiSandbox device registration?

  A. 5.0.6

  B. 5.0.11

  C. 5.0.8

  D. 5.2.1

  Correct Answer: C

• Question 18:

  FortiGate is configured to send suspicious files to a FortiSandbox for in-line inspection. The administrator

  creates a new VDOM, and then generates some traffic so what the new VDOM sends a file to the

  FortiSandbox for the first time.

  Which is true regarding this scenario?

  A. FortiSandbox will store the file, but not inspect it until the administrator manually authorizes the new VDOM.

  B. Before generating traffic, the administrator can push the VDOM configuration from the FortiGate to the FortiSandbox. Then when FortiSandbox receives the file, FortiSandbox will inspect the file.

  C. FortiSandbox can be pre-configured to automatically authorize the new VDOM and inspect the file.

  D. FortiSandbox will store the file, but not inspect it until the administrator manually adds the new VDOM to the FortiSandbox configuration.

  Correct Answer: B

• Question 19:

  If FortiSandbox connects to FortiGuard through a web proxy server, which FortiSandbox interface must have access to the proxy server?

  A. port3

  B. port2

  C. port1

  D. port4

  Correct Answer: C

• Question 20:

  You can configure FortiGate and FortiMail to send potentially malicious files to FortiSandbox. Which file types are considered to be potentially malicious? (Choose three.)

  A. JPEG images

  B. Rich text format (RTF)

  C. Adobe PDF

  D. Adobe Flash

  E. Microsoft PowerPoint

  Correct Answer: CDE