FCSS-SASE-AD-25: Fortinet NSE 7 - FortiSASE 25 Enterprise AdministratorDemo

By Fortinet · Question Mode

QuestionQ7

Network Security

Refer to the exhibit.

Question Image

Based on the displayed configuration, in which two ways will FortiSASE handle sessions requiring FortiSandbox inspection?

Choose two
  • A Only endpoints assigned a profile for sandbox detection will be processed by the sandbox feature.
  • B FortiClient quarantines only infected files that FortiSandbox detects as medium level.
  • C All files executed on a USB drive will be sent to FortiSandbox for analysis.
  • D All files will be sent to a on-premises FortiSandbox for inspection.
Explanation

Sandbox settings are configured in an endpoint profile and therefore govern the endpoints to which that profile is assigned. With All Files Executed from Removable Media enabled, files run from removable media, including USB drives, are submitted to FortiSandbox for analysis. A Medium quarantine threshold would quarantine infected files assessed as Medium or higher, and FortiSASE mode uses FortiSASE Sandbox rather than an on-premises standalone appliance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!