View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam


NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials-Question 31 Discussion

Refer to the exhibit. Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two answers)

  • A. All files will be sent to an on-premises FortiSandbox for inspection.
  • B. FortiClient quarantines only infected files that FortiSandbox detects as medium level.
  • C. All files executed on a USB drive will be sent to FortiSandbox for analysis.
  • D. Only endpoints assigned a profile for sandbox detection will be processed by the sandbox feature.
Correct Answer: C,D

Brave-Dump Clients Votes

CD 80%
BC 20%

Comments



javaughn Bryan 2025-11-21 20:40:18

Selected Answers: B, C


D is incorrect.

Explanation:

C is correct because under the "File Submission Options," the setting "All Files Executed from Removable Media" is enabled. A USB drive is a type of removable media, so any file executed from it will be submitted for sandbox inspection.

B is correct because under "Remediation Actions," the "Action" is set to "Quarantine". The "Sandbox Detection Verdict Level" shows that the "Medium" level is selected. This means FortiClient will quarantine files that FortiSandbox detects at a medium level or higher.

PAGE 107 & 108. SASE CORE ADMINISTRATOR GUIDE
  • Brave-Dumps.com Admin 2025-11-25 12:56:55
    Thank you.

Anonymous User 2026-03-13 21:02:41

Selected Answers: C, D


I Dont think B is right cause the sandbox will not only quarantine the file with medium verdict

Anonymous User 2026-03-28 05:01:55

Selected Answers: C, D


B is wrong because of the word: "only". On the Administration Guide:
Sandbox Detection Verdict Level
Select the desired detection verdict level. For FortiClient to apply the action
selected in the Action field to an infected file, FortiSandbox must detect the file
as this level or higher. For example, if Action is configured as Quarantine and
FortiSandbox Detection Verdict Level is configured as Medium, FortiClient
quarantines all infected files that FortiSandbox detects as Medium or a higher
level (High or Malicious). FortiClient does not quarantine files for which
FortiSandbox returns a verdict below this level (Low Risk or Clean).

Anonymous User 2026-04-02 20:32:57

Selected Answers: C, D


CD

I Am Weird 2026-04-07 04:03:48

Selected Answers: C, D


CD