Official Bank 0/30

Fortinet NSE 7 – Advances Threat Protection 2.5 Exam (NSE7_ATP-2.5) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
30 Total Questions
1
Question
Examine the virtual Simulator section of the scan job report shown in the exhibit, then answer the following question:

Exhibit

Based on the behavior observed by the virtual simulator, which of the following statements is the most likely scenario?
Options
A The file contained malicious JavaScript.
B The file contained a malicious macro.
C The file contained a malicious image file.
D The file contained a malicious URL.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the advanced threat protection solutions should you use to protect against an attacker may take during the lateral movement stage of the kill chain? (Choose two.)
Select 2
Options
A FortiMail and FortiSandbox
B FortiGate and FortiSandbox
C FortiClient and FortiSandbox
D FortiWeb and FortiSandbox
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following actions are performed by FortiSandbox at the static analysis stage?
Options
A Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.
B The sample behavior is analyzed and embedded objects are extracted for analysis.
C All activity is monitored and recorded while the sample is executed in a virtual environment.
D The sample’s file type is determined and submitted into the appropriate scan job queue.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following scan job report sections are generated by static analysis? (Choose two.)
Select 2
Options
A Launched Processes
B Registry Changes
C Office Behaviors
D Virtual Simulator
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Examine the FortiClient configuration shown in the exhibit. then answer the following question:

Exhibit

What is the general rule you should follow when configuring the Timeout value for files submitted to FortiSandbox?
Options
A It should be long enough for FortiSandbox to complete a static analysis of files.
B It should be long enough for FortiSandbox to complete sandbox analysis of files.
C It should be long enough for FortiSandbox to complete an antivirus scan of files.
D It should be long enough for FortiSandbox to complete a cloud query of file hashes.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.