Fortinet Exam FCP_FCT_AD-7.2 Topic 2 Question 26 Discussion

Actual exam question for Fortinet's FCP_FCT_AD-7.2 exam

Question #: 26
Topic #: 2

[All FCP_FCT_AD-7.2 Questions]

Refer to the exhibit.

Based on the FortiClient tog details shown in the exhibit, which two statements ace true? (Choose two.)

AThe filename Is Unconfirmed 899290.crdovnload.

BThe file status is Quarantined

CThe filename is sent to FortiSandbox for further inspection.

DThe file location is \??\D:\Users\.

Show Suggested Answer

Suggested Answer: D

Based on the FortiClient logs shown in the exhibit:

The first log entry shows the application 'firefox.exe' trying to access a destination IP, with the threat identified as 'Twitter.'

The action taken by the application firewall is 'blocked' with the event type 'appfirewall.'

This indicates that the application firewall has blocked access to Twitter.

Reference

FortiClient EMS 7.2 Study Guide, Application Firewall Logs Section

Fortinet Documentation on Interpreting FortiClient Logs

by Caren at Mar 23, 2025, 04:17 PM

Limited Time Offer

25%

Off

Get Premium FCP_FCT_AD-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Filiberto

2 months ago

Wait, is the file quarantined or just chilling in the 'Unconfirmed' zone? I need to know if I should start building a bunker.

upvoted 0 times

Stephane

22 days ago

B) The file status is Quarantined

upvoted 0 times

...

Skye

1 months ago

A) The filename Is Unconfirmed 899290.crdovnload.

upvoted 0 times

...

Lashunda

2 months ago

Wow, this question really has me scratching my head. I feel like I need a crystal ball to figure out the right answers!

upvoted 0 times

...

Leah

2 months ago

The file location is a bit of a mystery. \??\D:\Users\. Hmm, that's not very informative. Maybe it's trying to hide something?

upvoted 0 times

Nobuko

30 days ago

User 2: The filename is sent to FortiSandbox for further inspection.

upvoted 0 times

...

Lillian

2 months ago

User 1: The file status is Quarantined.

upvoted 0 times

...

Salina

2 months ago

I'm not sure about the answers. Can you explain why you think B and C are correct?

upvoted 0 times

...

Maryann

2 months ago

Sending it to FortiSandbox for further inspection is a good call. Can't be too careful when it comes to potential malware, you know?

upvoted 0 times

Carma

1 months ago

Yes, Quarantined means it's isolated from the system.

upvoted 0 times

...

Lynda

1 months ago

I think the file status being Quarantined is also a good sign.

upvoted 0 times

...

Vincenza

1 months ago

I agree, it's important to take precautions.

upvoted 0 times

...

Kip

1 months ago

Definitely, better safe than sorry.

upvoted 0 times

...

Lorrine

2 months ago

The filename looks a bit sketchy, but I'm not sure if it's actually unconfirmed. And quarantining the file is a smart move, just to be safe.

upvoted 0 times

...

Bernardo

2 months ago

I agree with you, Lizette. The file status is Quarantined and the filename is sent to FortiSandbox for further inspection.

upvoted 0 times

...

Lizette

2 months ago

I think the correct answers are B and C.

upvoted 0 times

...