Free Fortinet NSE7_ATP-2.5 Exam Dumps Questions & Answers

Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?

• A.The file contained malicious JavaScript.
• B.The file contained a malicious URL.
• C.The file contained a malicious macro.
• D.The file contained a malicious image file.

Which samples can FortiClient submit to FortiSandbox for analysis? (Choose two.)

• A.Command and control traffic
• B.URLs from web requests
• C.Files from removable storage
• D.Downloads from emails

FortiGate root VDOM is authorized and configured to send suspicious files to FortiSandbox for inspection. The administrator creates a new VDOM, and then generates some traffic so that the new VDOM sends a file to FortiSandbox for the first time.
Which of the following is true regarding this scenario?

• A.FortiSandbox will accept the file, but not inspect it until the administrator manually authorizes the new VDOM on FortiSandbox.
• B.FortiSandbox will inspect all files based on the root VDOM authorization state and configuration.
• C.FortiSandbox will accept the file, but not inspect it until the administrator manually configures the new VDOM on FortiSandbox.
• D.By default, FortiSandbox will autoauthorize the new VDOM, and inspect files as they are received.

FortiSandbox generates structured threat information exchange (STIX) packages for which of the following threats? (Choose two.)

• A.Intrusion attempts
• B.Malware
• C.Botnet connections
• D.Malicious URLs

Which of the advanced threat protection solutions should you use to protect against an attacker may take during the lateral movement stage of the kill chain? (Choose two.)

• A.FortiMail and FortiSandbox
• B.FortiClient and FortiSandbox
• C.FortiWeb and FortiSandbox
• D.FortiGate and FortiSandbox