NSE7 Advanced Threat Protection Practice Question
A company uses an advanced antivirus profile with machine learning engine enabled. After a recent outbreak, several files that were previously undetected are now flagged. How does the outbreak prevention feature help in this situation?
⚠ Common exam trap
Watch out — candidates often confuse outbreak prevention with FortiSandbox integration, assuming that all unknown files must be sandboxed, when in fact outbreak prevention leverages ML model updates for faster, inline detection without the latency of sandbox analysis.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It downloads the latest ML models from FortiGuard to detect new threats
The outbreak prevention feature in FortiGate's advanced antivirus profile automatically downloads the latest machine learning (ML) models from FortiGuard when a new outbreak is detected. This allows the ML engine to identify and flag previously undetected files without requiring a traditional signature update, enabling proactive detection of zero-day threats.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It downloads the latest ML models from FortiGuard to detect new threats
Why this is correct
Outbreak prevention provides immediate updates to ML models to catch new outbreaks.
- ✗
It sends all files to FortiSandbox for analysis
Why it's wrong here
That is a separate feature; outbreak prevention focuses on signature and ML updates.
- ✗
It quarantines all files for 24 hours until a signature is released
Why it's wrong here
Quarantine for a fixed time is not a standard outbreak prevention feature.
- ✗
It blocks all executable files from being downloaded
Why it's wrong here
That would be too restrictive and not outbreak-specific.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.