Fortinet Exam FCP_FCT_AD-7.2 Topic 3 Question 12 Discussion

Actual exam question for Fortinet's FCP_FCT_AD-7.2 exam

Question #: 12
Topic #: 3

Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

ABlocks the infected files as it is downloading

BQuarantines the infected files and logs all access attempts

CSends the infected file to FortiGuard for analysis

DAllows the infected file to download without scan

Show Suggested Answer

Suggested Answer: A

Based on the FortiClient logs shown in the exhibit:

The first log entry shows the application 'firefox.exe' trying to access a destination IP, with the threat identified as 'Twitter.'

The action taken by the application firewall is 'blocked' with the event type 'appfirewall.'

This indicates that the application firewall has blocked access to Twitter.

Reference

FortiClient EMS 7.2 Study Guide, Application Firewall Logs Section

Fortinet Documentation on Interpreting FortiClient Logs

by Jacinta at Aug 23, 2024, 11:14 AM

Limited Time Offer

25%

Off

Get Premium FCP_FCT_AD-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Samira

1 months ago

Haha, the 'infected file' part has me cracking up. I bet the poor IT guy who has to deal with that has seen it all.

upvoted 0 times

Johnna

5 days ago

B) Quarantines the infected files and logs all access attempts

upvoted 0 times

...

Antonette

14 days ago

A) Blocks the infected files as it is downloading

upvoted 0 times

...

Shenika

22 days ago

Carli: I wonder what FortiClient does when it detects one.

upvoted 0 times

...

Carli

24 days ago

User 2: Definitely, it's a constant battle to keep them out.

upvoted 0 times

...

Twanna

1 months ago

User 1: I know right, infected files are no joke!

upvoted 0 times

...

Jeannetta

2 months ago

D? Allowing the infected file to download without a scan? Are you kidding me? I'd rather not risk my system getting infected, thank you very much.

upvoted 0 times

Caprice

15 days ago

C) Sends the infected file to FortiGuard for analysis

upvoted 0 times

...

Craig

18 days ago

B) Quarantines the infected files and logs all access attempts

upvoted 0 times

...

Billy

24 days ago

A) Blocks the infected files as it is downloading

upvoted 0 times

...

Aliza

2 months ago

Okay, let's see... sending the infected file to FortiGuard for analysis? Nah, that's not the right move. I'm going with B on this one.

upvoted 0 times

Agustin

18 days ago

Agreed, blocking the infected files as it is downloading is a proactive approach to prevent any harm.

upvoted 0 times

...

Elsa

28 days ago

Definitely, we don't want to risk allowing the infected file to download without a scan.

upvoted 0 times

...

Venita

1 months ago

Yeah, quarantining the infected files and logging access attempts seems like the safest choice.

upvoted 0 times

...

Rosenda

1 months ago

I think B is the best option too.

upvoted 0 times

...

Rene

2 months ago

Hmm, I think the answer here is B. Quarantine the infected files and log the access attempts. Gotta love that extra layer of security.

upvoted 0 times

...

Tamar

2 months ago

Wow, this question is really testing my FortiClient knowledge! I better not download any infected files, that's for sure.

upvoted 0 times

Percy

1 months ago

User 2: Yeah, that sounds right. We definitely don't want any infected files on our system.

upvoted 0 times

...

Wilburn

1 months ago

User 1: I think the answer is B) Quarantines the infected files and logs all access attempts.

upvoted 0 times

...

Kristel

2 months ago

I'm not sure, but I think C) Sends the infected file to FortiGuard for analysis could also be a good option to prevent future infections.

upvoted 0 times

...

Daren

2 months ago

I agree with Delisa, because quarantining the infected files will prevent further harm.

upvoted 0 times

...

Delisa

2 months ago

I think the answer is B) Quarantines the infected files and logs all access attempts.

upvoted 0 times

...