NSE7 Advanced Threat Protection Practice Question
A company is deploying FortiClient ATP to protect endpoints. They want to block ransomware behavior in real time. Which FortiClient feature should be enabled?
⚠ Common exam trap
Test-takers frequently confuse Real-Time Protection with Web Filtering or Application Firewall, assuming that blocking the ransomware download or controlling app traffic is sufficient, but Fortinet specifically tests that behavioral blocking at the endpoint level is required for real-time ransomware defense.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Real-Time Protection
Real-Time Protection is the FortiClient feature that uses behavioral analysis and machine learning to detect and block ransomware-like activities, such as mass file encryption or unauthorized file modifications, as they occur. This feature monitors process behavior in real time, leveraging FortiSandbox threat intelligence and local heuristics to stop ransomware before it can cause damage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Real-Time Protection
Why this is correct
This feature monitors processes and file operations for malicious behavior.
- ✗
Vulnerability Scan
Why it's wrong here
Vulnerability scan identifies missing patches, not active ransomware.
- ✗
Web Filtering
Why it's wrong here
Web filtering blocks URLs, not behavioral patterns.
- ✗
Application Firewall
Why it's wrong here
Application firewall controls which apps can run, not behavior analysis.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.