Online Access Free NSE7_ATP-2.5 Exam Questions

Examine the FortiGate antivirus logs shown in the exhibit, than answer the following question:

Based on the logs shown, which of the following statements is correct? (Choose two.)

• A.The fsa_sample_1.exe file was not sent to FortiSandbox.
• B.The fsa_downloader.exe file was not blocked by FortiGate.
• C.The fsa_dropper.exe file was blocked using a local black list entry.
• D.The eicar.exe file was blocked using a FortiGiard generated signature.

Examine the CLI configuration, than answer the following question:

Which of the following statements is true regarding this FortiMail's inspection behavior?

• A.Files are skipped by content profile will be inspected by FortiSandbox.
• B.Malicious URLs will be removed by antispam and replaced with a message.
• C.Known malicious URLs will be inspected by FortiSandbox.
• D.Suspicious files not detected by antivirus will be inspected by FortiSandbox.

Examine the scan job report shown in the exhibit, then answer the following question:

Which of the following statements are true regarding this verdict? (Choose two.)

• A.The file contained malicious JavaScipt.
• B.The file contained a malicious macro.
• C.The file was sandboxed in two-guest VMs.
• D.The file was extracted using sniffer-mode inspection.

Which advanced threat protection integration solution should you use to protect against out-of-band attack vectors, such as USB drives, used during the delivery stage of the kill chain?

• A.FortiMail and FortiSandbox
• B.FortiGate and FortiSandbox
• C.FortiWeb and FortiSandbox
• D.FortiClient and FortiSandbox

Which of the following are features of network share scanning of FortiSandbox? (Choose two.)

• A.Detect network attacks.
• B.Detect malicious URLs.
• C.Move clean files to a separate network share.
• D.Replace suspicious files with a replacement message.