QuestionQ3

Security Management

Which Cyber Kill Chain stage does the integration of FortiSandbox and FortiClient EMS help block?

  • A Delivery
  • B Weaponization
  • C Reconnaissance
  • D Command and control
Explanation

FortiClient can submit files downloaded from email, the internet, removable media, or mapped drives to FortiSandbox, and can block access until the sandbox verdict is returned. This stops malicious payloads as they are delivered to the endpoint, before they can execute, which corresponds to the Delivery stage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!