Give You Free Regular Updates on FCP_FSA_AD-5.0 Exam Questions Sep 01, 2026 [Q16-Q40]

QUESTION 16
A security analyst is reviewing a scan job report that indicates a true positive match. The job report displays that the malware attempts to replace vital system executables. Which type of malware is the analyst observing? (Choose one answer)

QUESTION 17
You are configuring an integration between FortiWeb and FortiSandbox. On FortiWeb, where must you define the settings to submit files to FortiSandbox? (Choose one answer)

QUESTION 18
There is a connectivity problem between FortiSandbox and the FortiGuard distribution servers. You observe that a firewall located between FortiSandbox and the internet allows traffic on ports TCP/4443, UDP/8888, and UDP/53. What is the cause of the issue? (Choose one answer)

QUESTION 19
A FortiSandbox HA cluster is configured with the MTA adapter. What does the primary node do when it receives MTA jobs? (Choose one answer)

QUESTION 20
Which FortiGate daemon can you monitor in real time to verify that verdicts are being received by FortiGate? (Choose one answer)

QUESTION 21
What are three roles of the rating engine component of FortiSandbox? (Choose three answers)

QUESTION 22
You are asked to configure a FortiSandbox HA cluster. Port 4 on the primary and secondary nodes is dedicated for HA-specific communication. Which command must you use to configure the secondary node? (Choose one answer)

QUESTION 23
You are asked to configure FortiSandbox to use one VM instance for multiple sequential scan jobs without shutting down the instance between each scan job submission. Which scan profile setting must you enable to achieve this? (Choose one answer)

QUESTION 24
You are attempting to troubleshoot a FortiGate device that is not sending samples to FortiSandbox. Which CLI command will provide you with useful diagnostic information? (Choose one answer)

QUESTION 25
Refer to the exhibits.

A FortiClient EMS server is integrated with a FortiSandbox device. You are asked to find ways to expedite all scan jobs that require dynamic scanning so end users do not have to wait too long for a rating on suspicious attachments and URLs. Which configuration change will maintain a high security level but expedite all dynamic scan job requests? (Choose one answer)

QUESTION 26
To assign a file to a VM image, which two conditions must be true? (Choose two answers)

QUESTION 27
Refer to the exhibit.

Which command must you use to configure the worker node? (Choose one answer)

QUESTION 28
On a FortiClient EMS integrated with FortiSandbox, how can you apply FortiSandbox profile configurations to endpoints even if they are off fabric? (Choose one answer)

QUESTION 29
Refer to the exhibit.

Which command must you use to configure the FortiSandbox device as the primary node? (Choose one answer)

QUESTION 30
How can you limit an administrator’s access to scan jobs on FortiSandbox based on the system that submitted the scan request? (Choose one answer)

QUESTION 31
Refer to the exhibit.

Which two statements about the scanned file are true? (Choose two answers)

QUESTION 32
Refer to the exhibit.

Which command must you use to configure the secondary node? (Choose one answer)

QUESTION 33
Refer to the exhibit.

Which two inspections will FortiSandbox perform on samples submitted for sandboxing? (Choose two answers)