Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam FCP_FCT_AD-7.2 Topic 2 Question 26 Discussion

Actual exam question for Fortinet's FCP_FCT_AD-7.2 exam
Question #: 26
Topic #: 2
[All FCP_FCT_AD-7.2 Questions]

Refer to the exhibit.

Based on the FortiClient tog details shown in the exhibit, which two statements ace true? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: D

Based on the FortiClient logs shown in the exhibit:

The first log entry shows the application 'firefox.exe' trying to access a destination IP, with the threat identified as 'Twitter.'

The action taken by the application firewall is 'blocked' with the event type 'appfirewall.'

This indicates that the application firewall has blocked access to Twitter.

Reference

FortiClient EMS 7.2 Study Guide, Application Firewall Logs Section

Fortinet Documentation on Interpreting FortiClient Logs


Contribute your Thoughts:

Filiberto
1 months ago
Wait, is the file quarantined or just chilling in the 'Unconfirmed' zone? I need to know if I should start building a bunker.
upvoted 0 times
Stephane
7 days ago
B) The file status is Quarantined
upvoted 0 times
...
Skye
21 days ago
A) The filename Is Unconfirmed 899290.crdovnload.
upvoted 0 times
...
...
Lashunda
1 months ago
Wow, this question really has me scratching my head. I feel like I need a crystal ball to figure out the right answers!
upvoted 0 times
...
Leah
2 months ago
The file location is a bit of a mystery. \??\D:\Users\. Hmm, that's not very informative. Maybe it's trying to hide something?
upvoted 0 times
Nobuko
15 days ago
User 2: The filename is sent to FortiSandbox for further inspection.
upvoted 0 times
...
Lillian
1 months ago
User 1: The file status is Quarantined.
upvoted 0 times
...
...
Salina
2 months ago
I'm not sure about the answers. Can you explain why you think B and C are correct?
upvoted 0 times
...
Maryann
2 months ago
Sending it to FortiSandbox for further inspection is a good call. Can't be too careful when it comes to potential malware, you know?
upvoted 0 times
Carma
16 days ago
Yes, Quarantined means it's isolated from the system.
upvoted 0 times
...
Lynda
20 days ago
I think the file status being Quarantined is also a good sign.
upvoted 0 times
...
Vincenza
23 days ago
I agree, it's important to take precautions.
upvoted 0 times
...
Kip
29 days ago
Definitely, better safe than sorry.
upvoted 0 times
...
...
Lorrine
2 months ago
The filename looks a bit sketchy, but I'm not sure if it's actually unconfirmed. And quarantining the file is a smart move, just to be safe.
upvoted 0 times
...
Bernardo
2 months ago
I agree with you, Lizette. The file status is Quarantined and the filename is sent to FortiSandbox for further inspection.
upvoted 0 times
...
Lizette
2 months ago
I think the correct answers are B and C.
upvoted 0 times
...

Save Cancel