Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam FCP_FCT_AD-7.2 Topic 2 Question 26 Discussion

Actual exam question for Fortinet's FCP_FCT_AD-7.2 exam
Question #: 26
Topic #: 2
[All FCP_FCT_AD-7.2 Questions]

Refer to the exhibit.

Based on the FortiClient tog details shown in the exhibit, which two statements ace true? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: D

Based on the FortiClient logs shown in the exhibit:

The first log entry shows the application 'firefox.exe' trying to access a destination IP, with the threat identified as 'Twitter.'

The action taken by the application firewall is 'blocked' with the event type 'appfirewall.'

This indicates that the application firewall has blocked access to Twitter.

Reference

FortiClient EMS 7.2 Study Guide, Application Firewall Logs Section

Fortinet Documentation on Interpreting FortiClient Logs


Contribute your Thoughts:

Leah
1 days ago
The file location is a bit of a mystery. \??\D:\Users\. Hmm, that's not very informative. Maybe it's trying to hide something?
upvoted 0 times
...
Salina
3 days ago
I'm not sure about the answers. Can you explain why you think B and C are correct?
upvoted 0 times
...
Maryann
6 days ago
Sending it to FortiSandbox for further inspection is a good call. Can't be too careful when it comes to potential malware, you know?
upvoted 0 times
...
Lorrine
7 days ago
The filename looks a bit sketchy, but I'm not sure if it's actually unconfirmed. And quarantining the file is a smart move, just to be safe.
upvoted 0 times
...
Bernardo
8 days ago
I agree with you, Lizette. The file status is Quarantined and the filename is sent to FortiSandbox for further inspection.
upvoted 0 times
...
Lizette
10 days ago
I think the correct answers are B and C.
upvoted 0 times
...

Save Cancel