FORTISANDBOX Online Practice Questions and Answers

Which is true regarding Microsoft Office on FortiSandbox?

A. Microsoft Word documents (.docx) are not inspected.

B. Office 365 files are not supported.

C. Microsoft Office is not included. You must purchase it separately, then manually install it in the applicable VMs on FortiSandbox.

D. Office 2013 is installed in one of the VMs.

Which devices can be configured to send files to FortiSandbox 2.0.3? (Choose two.)

A. FortiGate

B. FortiMail

C. FortiSwitch

D. FortiAP

Which methods can be used to submit files to FortiSandbox for inspection? (Choose two.)

A. File shares

B. FTP upload

C. SFTP upload

D. JSON API

When does a FortiSandbox categorize a file as suspicious?

A. When the file is detected as known greyware

B. When the file matches an antivirus signature that might detect false positives

C. When the file matches a signature in the extended antivirus database

D. When the file is not detected as a known malware, but it has some of the same behaviors as malware

Which browser is installed in the Windows 7 x86 VM image?

A. Internet Explorer 9

B. Firefox

C. Google Chrome

D. Internet Explorer 10

What is the minimum FortiAnalyzer firmware version that supports FortiSandbox device registration?

A. 5.0.6

B. 5.0.11

C. 5.0.8

D. 5.2.1

If FortiSandbox connects to FortiGuard through a web proxy server, which FortiSandbox interface must have access to the proxy server?

A. port3

B. port2

C. port1

D. port4

You can configure FortiGate and FortiMail to send potentially malicious files to FortiSandbox. Which file types are considered to be potentially malicious? (Choose three.)

A. JPEG images

B. Rich text format (RTF)

C. Adobe PDF

D. Adobe Flash

E. Microsoft PowerPoint

Which devices can receive logs from FortiSandbox? (Choose two.)

A. SNMP manager

B. FortiAnalyzer

C. FortiManager

D. FortiGate

Based on the exhibit, which are true? (Choose two.)

A. Depending on the version indicated in the PDF file, FortiSandbox will scan using only one PDF reader (either Adobe Reader 9 or Adobe Reader 11).

B. If there are no Internet Explorer 10 installations in your network, you can safely disable the scanning of Adobe Flash with Microsoft Internet Explorer 10.

C. FortiSandbox will scan all Flash applications using Internet Explorer 10. This does not guarantee safety for Internet Explorer 8.

D. You can safely disable the PDF scanning with Acrobat Reader 9 because PDF scanning with Acrobat Reader 11 is enabled.