exam questions

Exam NSE8_811 All Questions

View all questions & answers for the NSE8_811 exam

Exam NSE8_811 topic 1 question 39 discussion

Actual exam question from Fortinet's NSE8_811
Question #: 39
Topic #: 1
[All NSE8_811 Questions]

Refer to the exhibit.

Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

  • A. The high-risk file will be discarded by attachment analysis.
  • B. The high-risk file will go to the system quarantine.
  • C. The high-risk file will be received by the recipient.
  • D. The high-risk file will be discarded by malware/virus outbreak protection.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ADSA
Highly Voted 3 years, 9 months ago
C is correct Under FortiSandbox, set the default Scan mode: Submit and wait for result to wait for scan results before delivering the email, or Submit only to submit emails to FortiSandbox and still deliver the email without waiting for the scan results. https://docs.fortinet.com/document/fortimail/6.2.3/cookbook/497262/creating-an-antivirus-profile
upvoted 6 times
...
aioross
Most Recent 2 years, 6 months ago
Correct: C
upvoted 1 times
...
FortiTorti
2 years, 9 months ago
Selected Answer: C
Sandbox is Submit only
upvoted 2 times
...
air112
3 years, 1 month ago
Selected Answer: C
C is correct
upvoted 2 times
...
brainlet
3 years, 4 months ago
Selected Answer: C
C. FortiSandbox is set to "Submit only", so the action specified on High Risk will not execute. Can't be D, because if it got to Sandbox inspection, it already passed Malware/virus outbreak. Also, the default action is set to SystemQuarantine.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago