Fortinet NSE 7 - Advanced Threat Protection 2.5 - NSE7

Fortinet NSE 7 - Advanced Threat Protection 2.5 - NSE7_ATP-2.5 Exam Questions

QUESTION NO: 1
Examine the Suspicious Indicators section of the scan job shown in the exhibit, then answer the following question:

Which FortiSandbox component identified the vulnerability exploits?

A. Cache check B. VM scan C. Antivirus scan D. Static analysis

Correct Answer: D

QUESTION NO: 2
Examine the System Information widget shown in the exhibit, then answer the following question:

Which of the following inspections will FortiSandbox perform on samples submitted for sandboxing? (Choose two.)

A. URL rating on FQDN seen in DNS requests B. Antivirus inspection on downloaded files C. URL rating on HTTP GET requests D. IP reputation check on callback connections

Correct Answer: B,C

QUESTION NO: 3
Examine the scan job report shown in the exhibit, then answer the following question:

Which of the following statements are true regarding this verdict? (Choose two.)

A. The file contained a malicious macro. B. The file contained malicious JavaScipt. C. The file was extracted using sniffer-mode inspection. D. The file was sandboxed in two-guest VMs.

Correct Answer: C,D

QUESTION NO: 4
Which of the following scan job report sections are generated by static analysis? (Choose two.)

A. Registry Changes B. Launched Processes C. Virtual Simulator D. Office Behaviors

Correct Answer: A,C