At ValidExamDumps, we consistently monitor updates to the Fortinet FCP_FSA_AD-5.0 exam questions by Fortinet. Whenever our team identifies changes in the exam questions, objectives, focus areas or requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam on their first attempt without needing additional materials or study guides.
Other certification materials providers often include outdated or removed questions by Fortinet in their FCP_FSA_AD-5.0 exam. These outdated questions lead to customers failing their Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the Fortinet FCP_FSA_AD-5.0 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.
Refer to the exhibit.
Which command must you use to configure the worker node? (Choose one answer)
From the High Availability and Management lesson, the Study Guide states:
'You must configure the HA group name, password, and the cluster virtual IP. The worker nodes provide load balancing. The primary node distributes scan jobs to the worker nodes.'
'You must configure the HA group name, password, and the virtual IP only on the primary node... Devices will interact with the cluster using this virtual IP.'
From the exhibit topology:
Cluster Virtual IP address = 10.25.1.50
Primary Node port1 = 10.25.1.30
Secondary Node port1 = 10.25.1.40
Worker Node port1 = 10.75.1.10
The worker node must be configured to point to the Cluster Virtual IP (10.25.1.50), not the individual primary node IP. This is because worker nodes join the cluster by connecting to the cluster virtual IP address.
Therefore the correct command is: hc-worker -a -sI0.25.1.50 -p
You must increase the scanning capacity of a FortiSandbox device by increasing the number of clones, but the FortiSandbox local clone limit is already at maximum. Which two actions can you take to expand the scanning capacity of the unit? (Choose two answers)
From the Scanning and Rating Components lesson, the Study Guide states:
'The universal VM license is a single license that grants you access to multiple VMs. Provides a scalable and cost-effective solution with up to 200 VMs on a single unit. Clone count limits shown on the VM Settings view apply to all enabled VM Types.'
'When you enable Adaptive Scan, FortiSandbox dynamically adjusts the number of clones of any local VMs you have enabled. Enabling this option does not affect the number of remote Mac OS or Windows cloud VMs.'
This confirms:
Option A --- Deploying remote WindowsCloudVM and MACOSX clones expands capacity beyond local clone limits since remote VMs are not subject to local clone restrictions
Option D --- Adding VM licenses directly increases the number of available VMs up to 200 on a single unit
Reorganizing the scan priority list (B) only affects scan order, not capacity. Adding custom VMs (C) would still be subject to the same local clone limits.
To allow access to the FortiSandbox GUI the administrator must configure an IP address and a default gateway. Which two commands must the administrator use to accomplish this task? (Choose two answers)
From the Deployment and System Settings lesson, the Study Guide explicitly states:
'Initial port1 IP configuration must be performed from the console, using the commands shown on this slide. If your management computer is on a separate subnet from FortiSandbox, you must specify a gateway address using the commands shown on this slide.'
The two required commands are:
set port1-ip <IP address> --- to assign the IP address to port1 for GUI access
set default-gw <IP Address> --- to configure the default gateway so the management computer can reach FortiSandbox from a different subnet
Option B (set api-port port1) is for API access configuration, and Option C (set admin-port port1) is not a valid FortiSandbox CLI command for this purpose.
Refer to the exhibit.
Which command must you use to configure the FortiSandbox device as the primary node? (Choose one answer)
The exhibit labels 10.25.1.50 as the cluster virtual IP address. The Study Guide explains that in HA configuration, ''You must configure the HA group name, password, and the virtual IP only on the primary node.'' It also says: ''You must also configure an external interface for external communication and an IP address that will be used as a virtual IP for the whole cluster. Devices will interact with the cluster using this virtual IP.''
That is why the command for the primary node must point to the cluster virtual IP, not to the individual port1 addresses of the primary, secondary, or upstream firewall. In the exhibit, 10.25.1.30 is the primary node's own port1 IP, 10.25.1.40 is the secondary node's port1 IP, and 10.25.1.254 is the network device. The only address that matches the required cluster virtual IP is 10.25.1.50, so the correct command is hc-settings -si iport1 -a10.25.1.50.
Refer to the exhibit.
A network topology is shown. Which two important steps must you take before you enable a BCC adapter on FortiSandbox? (Choose two answers)
From the Deployment and System Settings lesson, the Study Guide states:
'You can submit emails from an upstream MTA server to FortiSandbox using a BCC adapter. FortiSandbox will extract attachment files and URLs in an email body.'
For a BCC adapter to function correctly, two critical prerequisites must be in place:
Option C --- The upstream SEG must be configured to BCC emails to a FortiSandbox sub-domain so that email copies are routed to FortiSandbox for analysis
Option D --- An MX record must be added to the DNS server for the BCC email sub-domain, so that the sub-domain resolves to the FortiSandbox IP address, allowing the SEG to properly deliver BCC email copies
Option A is incorrect because the BCC adapter handles full email inspection --- FortiSandbox itself extracts files and URLs rather than the SEG doing this. Option B is incorrect because an MX record (not just an A record) is the required DNS configuration for email routing.
