Fortinet NSE 7 - Advanced Threat Protection 2.5 (NSE7_ATP-2.5) Free Practice Test

Question 1

Which of the following actions are performed by FortiSandbox at the static analysis stage?

A. The sample behavior is analyzed and embedded objects are extracted for analysis.

B. The sample's file type is determined and submitted into the appropriate scan job queue.

C. All activity is monitored and recorded while the sample is executed in a virtual environment.

D. Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.

Correct Answer: A

Question 2

Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?

A. The file contained a malicious macro.

B. The file contained malicious JavaScript.

C. The file contained a malicious image file.

D. The file contained a malicious URL.

Correct Answer: B

Question 3

What advantage does sandboxing provide over traditional virus detection methods?

A. Pattern-based detection that can catch multiple variants of a virus.

B. Code emulation as packets are handled in real-time.

C. Full code execution in an isolated and protected environment.

D. Heuristics detection that can detect new variants of existing viruses.

Correct Answer: C

Question 4

Which FortiWeb feature supports file submission to FortiSandbox?

A. Attack signature

B. IP reputation

C. File security

D. Credential stuffing defense

Correct Answer: C

Welcome to TestSimulate