Loading provider exams...
Sign Up & unlock 100% of Exam Questions
No Strings Attached!
Updated
Which stage of the Cyber Kill Chain does FortiSandbox and FortiClient EMS integration help to block?
This exam has 29 community-verified practice questions. Create a free account to access all questions, comments, and explanations.
Log In / Sign UpYou are asked to create some custom VMs to better represent your security environment.
In which two FortiSandbox deployments is this supported? (Choose two.)
Which two statements are true about creating an API interface? (Choose two.)
When using SIMNET, which two inspections cannot be performed with real traffic? (Choose two.)
Refer to the exhibits.

You are unable to download guest VMs on a new FortiSandbox VM.
What is the reason for this?
You must increase the scanning capacity of a FortiSandbox device by increasing the number of clones, but the FortiSandox local clone limit is already at maximum.
Which two actions can you take to expand the scanning capacity of the unit? (Choose two.)
To allow access to the FortiSandbox GUI the administrator must configure an IP address and a default gateway.
Which two commands must the administrator use to accomplish this task? (Choose two.)
Refer to the exhibit.

Which command must you use to configure the worker node?
To assign a file to a VM image, which two conditions must be true? (Choose two.)
An organization has an existing FortiGate provisioned as a data center firewall (DCFW) that submits inbound files to FortiSandbox for inline scanning. As a result of a network redesign, traffic between the FortiSandbox and the DCFW now passes through an intermediate firewall. Inline scanning is no longer working.
While examining the configuration of the intermediate firewall you notice that it is configured to allow traffic on ports TCP/3389, UDP/53, and TCP/443.
What must you change for the integration to work?
Refer to the exhibit.

As a best practice, where must you rank the FortiClient inputs when configuring the job queue priority on FortiSandbox?
A FortiSandbox HA cluster is configured with the MTA adapter.
What does the primary node do when it receives MTA jobs?