Online Access Free NSE7_ATP-2.5 Practice Test

Which of the kill chain stages does Fortinet's advanced threat protection solution block? (Choose three.)

• A.Lateral movement
• B.Delivery
• C.Weaponization
• D.Reconnaissance
• E.Command and control

Examine the FortiGate antivirus logs shown in the exhibit, than answer the following question:

Based on the logs shown, which of the following statements is correct? (Choose two.)

• A.The fsa_downloader.exe file was not blocked by FortiGate.
• B.The fsa_sample_1.exe file was not sent to FortiSandbox.
• C.The eicar.exe file was blocked using a FortiGiard generated signature.
• D.The fsa_dropper.exe file was blocked using a local black list entry.

Examine the System Information widget shown in the exhibit, then answer the following question:

Which of the following inspections will FortiSandbox perform on samples submitted for sandboxing? (Choose two.)

• A.URL rating on HTTP GET requests
• B.IP reputation check on callback connections
• C.URL rating on FQDN seen in DNS requests
• D.Antivirus inspection on downloaded files

Examine the FortiSandbox Scan Profile configuration shown in the exhibit, and then answer the following question:

Based on the configuration, which of the following statements are true? (Choose two.)

• A.HTM files submitted using the management GUI will be inspected.
• B.PDF files will be inspected in the WIN7X86VM)16 VM.
• C.URLs submitted using JSON API will not be inspected.
• D.DMG files will be inspected in the MACOSX VM.

Which of the following advanced threat protection are capable of preventing patient-zero infections? (Choose two.)

• A.FortiWeb and FortiSandbox
• B.FortiMail and FortiSandbox
• C.FortiGate and FortiSandbox
• D.FortiClient and FortiSandbox