Question 1

Refer to the exhibit.

The exhibit shows the forensics analysis of an event detected by the FortiEDR core

In this scenario, which statement is correct regarding the threat?

Options :

A : This is an exfiltration attack and has been stopped by FortiEDR.

B : This is an exfiltration attack and has not been stopped by FortiEDR

C : This is a ransomware attack and has not been stopped by FortiEDR.

D : This is a ransomware attack and has been stopped by FortiEDR

Answer: D

Question 2

Refer to the exhibit showing a firewall policy configuration.

To prevent unauthorized access of their cloud assets, an administrator wants to enforce authentication on

firewall policy ID 1.

What change does the administrator need to make?

Options :

A :

B :

C :

D :

Answer: B

Question 3

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

Options :

A : Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.

B : Objects from the root FortiGate will only be synchronized to FGT__2.

C :

Objects from the root FortiGate will not be synchronized to any downstream FortiGate.

D : Objects from the root FortiGate will only be synchronized to FGT_3.

Answer: A

Question 4

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

Options :

A : DKIM validation in a session profile

B : Sender domain validation in a session profile

C : Impersonation analysis in an antispam profile

D : Soft fail SPF validation in an antispam profile

Answer: C

Question 5

Refer to the exhibit, which shows diagnostic output.

A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

Options :

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Confidently Practice Online with Free NSE8_812 Exam Cram

Buying Options: