Configure Malware Detection and Advanced Persistent Threat Mitigation NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company's security team wants to use FortiMail to analyze suspicious attachments that are not detected by traditional antivirus signatures. They have a FortiSandbox appliance in their network. What should the administrator configure in FortiMail to send attachments to FortiSandbox for analysis?

   • ACreate a content profile that blocks all executable files.
   • BConfigure the antivirus action to 'quarantine' for all attachments.
   • CSet the email filter to 'bounce' messages with attachments.
   • DEnable the 'sandbox submission' feature and specify the FortiSandbox IP address.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is experiencing a targeted attack where attackers are sending emails with malicious macros in Word documents. The antivirus scanner is not detecting these documents because they are new variants. The company has FortiSandbox. What should the administrator configure in FortiMail to mitigate this APT?

   • AEnable sandbox submission for all attachments and configure the APT policy to block emails with a 'malicious' verdict.
   • BIncrease the antivirus scan sensitivity to 'highest'.
   • CBlock all Word documents from external senders.
   • DDisable macro execution in the email client.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A FortiMail administrator has configured sandbox submission for attachments. FortiSandbox returns a verdict of 'malicious' for a file that was attached to an email sent to multiple internal users. What action should the administrator configure in the sandbox verdict handling policy to respond to this verdict?

   • ABounce the email back to the sender.
   • BQuarantine the email and notify the administrator.
   • CStrip the attachment and deliver the email body.
   • DAllow the email to be delivered and notify the sender.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary goal of an APT mitigation policy in FortiMail?

   • ATo simplify email routing
   • BTo reduce email storage usage
   • CTo improve user productivity
   • DTo protect against targeted and advanced threats using sandbox results and threat intelligence
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company wants to use FortiMail to submit suspicious attachments to FortiSandbox, but they only want to submit attachments that are not detected by the antivirus scanner. What should the administrator configure?

   • AConfigure the antivirus action to 'quarantine' for all attachments.
   • BDisable antivirus scanning and rely solely on sandbox.
   • CEnable sandbox submission for all attachments.
   • DEnable sandbox submission only for attachments that pass the antivirus scan.
   Reveal Solution Discussion Select an answer first