Fortinet NSE7_ATP-2.5 Online Practice Questions and Exam Preparation

Fortinet NSE7_ATP-2.5 Online Questions & Answers

• Question 1:

  Which of the following are FortiWeb's roles when integrated with FortiSandbox? (Choose two.)

  A. Share threat information
  B. Prevent outbreaks
  C. Generate a verdict
  D. Block known threats
  A. Share threat information
  D. Block known threats

• Question 2:

  Examine the FortiSandbox configuration on FortiMail shown in the exhibit, then answer the following question:

  

  What does the Scan result expires in value specify?

  A. How often the local scam results cache will expire on FortiMail.
  B. How long FortiMail will wait to send a file or URI to FortiSandbox.
  C. How long FortiMail will wait for a scan result from FortiSandbox.
  D. How long FortiMail will query FortiSandbox for a scan result.
  B. How long FortiMail will wait to send a file or URI to FortiSandbox.

• Question 3:

  Examine the following topology shown in the exhibit, then answer the following question:

  

  Which of the following configuration tasks are applicable to secure Webserver from known threats? (Choose two.)

  A. Apply an SSL inspection profile configured for protecting SSL server.
  B. Apply an antivirus profile to the port1 -> port2 firewall policy.
  C. Apply an SSL inspection profile configured for full SSL inspection.
  D. Apply a web filter profile to the port1 -> port2 firewall policy.
  A. Apply an SSL inspection profile configured for protecting SSL server.
  C. Apply an SSL inspection profile configured for full SSL inspection.

• Question 4:

  Examine the scan job report shown in the exhibit, then answer the following question: Which of the following statements are true regarding this verdict? (Choose two.)

  

  A. The file contained malicious JavaScipt.
  B. The file contained a malicious macro.
  C. The file was sandboxed in two-guest VMs.
  D. The file was extracted using sniffer-mode inspection.
  A. The file contained malicious JavaScipt.
  C. The file was sandboxed in two-guest VMs.

• Question 5:

  Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

  

  Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?

  A. The file contained a malicious image file.
  B. The file contained malicious JavaScript.
  C. The file contained a malicious macro.
  D. The file contained a malicious URL.
  B. The file contained malicious JavaScript.

• Question 6:

  Examine the FortiGate antivirus log detail shown in the exhibit, then answer the following question:

  

  Which of the following statements is true?

  A. FortiGate quarantined the file as a malware.
  B. The file matched a FortiSandbox-generated malware signature.
  C. The file was downloaded from www.fortinet.com.
  D. The FSA/RISK_HIGH verdict was generated by FortiSandbox.
  C. The file was downloaded from www.fortinet.com.

• Question 7:

  Which of the following actions are performed by FortiSandbox at the static analysis stage?

  A. All activity is monitored and recorded while the sample is executed in a virtual environment.
  B. The sample's file type is determined and submitted into the appropriate scan job queue.
  C. The sample behavior is analyzed and embedded objects are extracted for analysis.
  D. Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.
  D. Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.

• Question 8:

  Which FortiWeb feature supports file submission to FortiSandbox?

  A. Attack signature
  B. Credential stuffing defense
  C. IP reputation
  D. File security
  C. IP reputation

• Question 9:

  What advantage does sandboxing provide over traditional virus detection methods?

  A. Heuristics detection that can detect new variants of existing viruses.
  B. Pattern-based detection that can catch multiple variants of a virus.
  C. Full code execution in an isolated and protected environment.
  D. Code emulation as packets are handled in real-time.
  A. Heuristics detection that can detect new variants of existing viruses.

• Question 10:

  Examine the CLI configuration, than answer the following question:

  

  Which of the following statements is true regarding this FortiMail's inspection behavior?

  A. Malicious URLs will be removed by antispam and replaced with a message.
  B. Suspicious files not detected by antivirus will be inspected by FortiSandbox.
  C. Known malicious URLs will be inspected by FortiSandbox.
  D. Files are skipped by content profile will be inspected by FortiSandbox.
  C. Known malicious URLs will be inspected by FortiSandbox.