View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam
NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials - Question #31 Discussion
Community Explanations & Comments (5)
javaughn Bryan
11 months ago
Selected: B, C
D is incorrect.
Explanation:
C is correct because under the "File Submission Options," the setting "All Files Executed from Removable Media" is enabled. A USB drive is a type of removable media, so any file executed from it will be submitted for sandbox inspection.
B is correct because under "Remediation Actions," the "Action" is set to "Quarantine". The "Sandbox Detection Verdict Level" shows that the "Medium" level is selected. This means FortiClient will quarantine files that FortiSandbox detects at a medium level or higher.
PAGE 107 & 108. SASE CORE ADMINISTRATOR GUIDE
Explanation:
C is correct because under the "File Submission Options," the setting "All Files Executed from Removable Media" is enabled. A USB drive is a type of removable media, so any file executed from it will be submitted for sandbox inspection.
B is correct because under "Remediation Actions," the "Action" is set to "Quarantine". The "Sandbox Detection Verdict Level" shows that the "Medium" level is selected. This means FortiClient will quarantine files that FortiSandbox detects at a medium level or higher.
PAGE 107 & 108. SASE CORE ADMINISTRATOR GUIDE
Brave-Dumps.com Admin
11 months ago
Thank you.
Anonymous User
7 months ago
Selected: C, D
I Dont think B is right cause the sandbox will not only quarantine the file with medium verdict
Anonymous User
7 months ago
Selected: C, D
B is wrong because of the word: "only". On the Administration Guide:
Sandbox Detection Verdict Level
Select the desired detection verdict level. For FortiClient to apply the action
selected in the Action field to an infected file, FortiSandbox must detect the file
as this level or higher. For example, if Action is configured as Quarantine and
FortiSandbox Detection Verdict Level is configured as Medium, FortiClient
quarantines all infected files that FortiSandbox detects as Medium or a higher
level (High or Malicious). FortiClient does not quarantine files for which
FortiSandbox returns a verdict below this level (Low Risk or Clean).
Sandbox Detection Verdict Level
Select the desired detection verdict level. For FortiClient to apply the action
selected in the Action field to an infected file, FortiSandbox must detect the file
as this level or higher. For example, if Action is configured as Quarantine and
FortiSandbox Detection Verdict Level is configured as Medium, FortiClient
quarantines all infected files that FortiSandbox detects as Medium or a higher
level (High or Malicious). FortiClient does not quarantine files for which
FortiSandbox returns a verdict below this level (Low Risk or Clean).
Anonymous User
6 months ago
Selected: C, D
CD
I Am Weird
6 months ago
Selected: C, D
CD
Refer to the exhibit. Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two answers)
Brave-Dump Community Votes