Official Bank 0/30

Fortinet NSE 7 – Advances Threat Protection 2.5 Exam (NSE7_ATP-2.5) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
30 Total Questions
1
Question
Which samples can FortiClient submit to FortiSandbox for analysis? (Choose two.)
Select 2
Options
A URLs from web requests
B Command and control traffic
C Downloads from emails
D Files from removable storage
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Examine the FortiClient configuration shown in the exhibit. then answer the following question:

Exhibit

What is the general rule you should follow when configuring the Timeout value for files submitted to FortiSandbox?
Options
A It should be long enough for FortiSandbox to complete a static analysis of files.
B It should be long enough for FortiSandbox to complete sandbox analysis of files.
C It should be long enough for FortiSandbox to complete an antivirus scan of files.
D It should be long enough for FortiSandbox to complete a cloud query of file hashes.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Examine the CLI configuration, than answer the following question:

Which of the following statements is true regarding this FortiMail’s inspection behavior?
Options
A Suspicious files not detected by antivirus will be inspected by FortiSandbox.
B Known malicious URLs will be inspected by FortiSandbox.
C Malicious URLs will be removed by antispam and replaced with a message.
D Files are skipped by content profile will be inspected by FortiSandbox.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following advanced threat protection are capable of preventing patient-zero infections? (Choose two.)
Select 2
Options
A FortiGate and FortiSandbox
B FortiMail and FortiSandbox
C FortiWeb and FortiSandbox
D FortiClient and FortiSandbox
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which of the following actions are performed by FortiSandbox at the static analysis stage?
Options
A Embedded attachments are scanned using the FortiGuard antivirus engine and the latest signature database.
B The sample behavior is analyzed and embedded objects are extracted for analysis.
C All activity is monitored and recorded while the sample is executed in a virtual environment.
D The sample’s file type is determined and submitted into the appropriate scan job queue.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.