Fortinet NSE 7 - Advanced Threat Protection 2.5 - NSE7_ATP-2.5 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?

A. The file contained a malicious macro. B. The file contained a malicious image file. C. The file contained a malicious URL. D. The file contained malicious JavaScript.

Discussion 0

Correct Answer: D Vote an answer

Question 2

Examine the FortiClient configuration shown in the exhibit. then answer the following question:

What is the general rule you should follow when configuring the Timeout value for files submitted to FortiSandbox?

A. It should be long enough for FortiSandbox to complete a static analysis of files. B. It should be long enough for FortiSandbox to complete sandbox analysis of files. C. It should be long enough for FortiSandbox to complete an antivirus scan of files. D. It should be long enough for FortiSandbox to complete a cloud query of file hashes.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Examine the scan job report shown in the exhibit, then answer the following question:

Which of the following statements are true regarding this verdict? (Choose two.)

A. The file was sandboxed in two-guest VMs. B. The file was extracted using sniffer-mode inspection. C. The file contained a malicious macro. D. The file contained malicious JavaScipt.

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

Examine the FortiGate antivirus logs shown in the exhibit, than answer the following question:

Based on the logs shown, which of the following statements is correct? (Choose two.)

A. The fsa_downloader.exe file was not blocked by FortiGate. B. The fsa_sample_1.exe file was not sent to FortiSandbox. C. The eicar.exe file was blocked using a FortiGiard generated signature. D. The fsa_dropper.exe file was blocked using a local black list entry.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).