At ValidExamDumps, we consistently monitor updates to the Fortinet FCP_FSA_AD-5.0 exam questions by Fortinet. Whenever our team identifies changes in the exam questions,exam objectives, exam focus areas or in exam requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam on their first attempt without needing additional materials or study guides.
Other certification materials providers often include outdated or removed questions by Fortinet in their Fortinet FCP_FSA_AD-5.0 exam. These outdated questions lead to customers failing their Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the Fortinet FCP_FSA_AD-5.0 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.
You must increase the scanning capacity of a FortiSandbox device by increasing the number of clones, but the FortiSandbox local clone limit is already at maximum. Which two actions can you take to expand the scanning capacity of the unit? (Choose two answers)
From the Scanning and Rating Components lesson, the Study Guide states:
'The universal VM license is a single license that grants you access to multiple VMs. Provides a scalable and cost-effective solution with up to 200 VMs on a single unit. Clone count limits shown on the VM Settings view apply to all enabled VM Types.'
'When you enable Adaptive Scan, FortiSandbox dynamically adjusts the number of clones of any local VMs you have enabled. Enabling this option does not affect the number of remote Mac OS or Windows cloud VMs.'
This confirms:
Option A --- Deploying remote WindowsCloudVM and MACOSX clones expands capacity beyond local clone limits since remote VMs are not subject to local clone restrictions
Option D --- Adding VM licenses directly increases the number of available VMs up to 200 on a single unit
Reorganizing the scan priority list (B) only affects scan order, not capacity. Adding custom VMs (C) would still be subject to the same local clone limits.
To allow access to the FortiSandbox GUI the administrator must configure an IP address and a default gateway. Which two commands must the administrator use to accomplish this task? (Choose two answers)
From the Deployment and System Settings lesson, the Study Guide explicitly states:
'Initial port1 IP configuration must be performed from the console, using the commands shown on this slide. If your management computer is on a separate subnet from FortiSandbox, you must specify a gateway address using the commands shown on this slide.'
The two required commands are:
set port1-ip <IP address> --- to assign the IP address to port1 for GUI access
set default-gw <IP Address> --- to configure the default gateway so the management computer can reach FortiSandbox from a different subnet
Option B (set api-port port1) is for API access configuration, and Option C (set admin-port port1) is not a valid FortiSandbox CLI command for this purpose.
Refer to the exhibit.
Which command must you use to configure the FortiSandbox device as the primary node? (Choose one answer)
The exhibit labels 10.25.1.50 as the cluster virtual IP address. The Study Guide explains that in HA configuration, ''You must configure the HA group name, password, and the virtual IP only on the primary node.'' It also says: ''You must also configure an external interface for external communication and an IP address that will be used as a virtual IP for the whole cluster. Devices will interact with the cluster using this virtual IP.''
That is why the command for the primary node must point to the cluster virtual IP, not to the individual port1 addresses of the primary, secondary, or upstream firewall. In the exhibit, 10.25.1.30 is the primary node's own port1 IP, 10.25.1.40 is the secondary node's port1 IP, and 10.25.1.254 is the network device. The only address that matches the required cluster virtual IP is 10.25.1.50, so the correct command is hc-settings -si iport1 -a10.25.1.50.
Refer to the exhibit.
A network topology is shown. Which two important steps must you take before you enable a BCC adapter on FortiSandbox? (Choose two answers)
From the Deployment and System Settings lesson, the Study Guide states:
'You can submit emails from an upstream MTA server to FortiSandbox using a BCC adapter. FortiSandbox will extract attachment files and URLs in an email body.'
For a BCC adapter to function correctly, two critical prerequisites must be in place:
Option C --- The upstream SEG must be configured to BCC emails to a FortiSandbox sub-domain so that email copies are routed to FortiSandbox for analysis
Option D --- An MX record must be added to the DNS server for the BCC email sub-domain, so that the sub-domain resolves to the FortiSandbox IP address, allowing the SEG to properly deliver BCC email copies
Option A is incorrect because the BCC adapter handles full email inspection --- FortiSandbox itself extracts files and URLs rather than the SEG doing this. Option B is incorrect because an MX record (not just an A record) is the required DNS configuration for email routing.
Which two products integrated with FortiSandbox work to protect against the lateral movement stage of the Cyber Kill Chain? (Choose two answers)
From the Attack Methodologies lesson, the Study Guide explicitly states:
'During the lateral movement stage, the attacker is trying to compromise and infect other computers in the network. If these computers are protected with FortiClient, FortiClient can send any file that the computer downloads, to FortiSandbox for analysis.'
'FortiDeceptor creates a network of decoys, to lure attackers and monitor their activities on the network. When attackers attack a decoy, an alert is generated. FortiDeceptor engages FortiSandBox to get a verdict on the suspected malware.'
'If you deploy FortiGate as an ISFW firewall, FortiGate can analyze the traffic moving across subnets and send any files to FortiSandbox for analysis to prevent propagation.'
Both FortiDeceptor (Option B) and FortiGate (Option D) are specifically identified as protecting against the lateral movement stage through their FortiSandbox integration.
