NSE7_ATP-2.5 試験問題を無料オンラインアクセス

Examine the FortiSandbox Scan Profile configuration shown in the exhibit, and then answer the following question:

Based on the configuration, which of the following statements are true? (Choose two.)

• A.PDF files will be inspected in the WIN7X86VM)16 VM.
• B.URLs submitted using JSON API will not be inspected.
• C.HTM files submitted using the management GUI will be inspected.
• D.DMG files will be inspected in the MACOSX VM.

What advantage does sandboxing provide over traditional virus detection methods?

• A.Full code execution in an isolated and protected environment.
• B.Code emulation as packets are handled in real-time.
• C.Heuristics detection that can detect new variants of existing viruses.
• D.Pattern-based detection that can catch multiple variants of a virus.

Which FortiSandbox diagnostic command should you use to diagnose Internet connectivity issues on port3?

• A.ping
• B.tcpdump
• C.test-network
• D.traceroute

Examine the CLI configuration, than answer the following question:

Which of the following statements is true regarding this FortiMail's inspection behavior?

• A.Malicious URLs will be removed by antispam and replaced with a message.
• B.Known malicious URLs will be inspected by FortiSandbox.
• C.Files are skipped by content profile will be inspected by FortiSandbox.
• D.Suspicious files not detected by antivirus will be inspected by FortiSandbox.

Which of the following actions are performed by FortiSandbox at the static analysis stage?

• A.The sample's file type is determined and submitted into the appropriate scan job queue.
• B.The sample behavior is analyzed and embedded objects are extracted for analysis.
• C.Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.
• D.All activity is monitored and recorded while the sample is executed in a virtual environment.