NSE7 Advanced Threat Protection Practice Question
A network admin configures FortiGate to submit files to FortiSandbox for analysis. After submission, the FortiGate logs show that files are being sent but no verdict is returned. The FortiSandbox is reachable and licensed. What is the most likely cause?
⚠ Common exam trap
Many exam-takers assume a licensed FortiSandbox alone is sufficient for verdict delivery, overlooking that FortiGate requires an additional FortiGuard Security Rating subscription to consume those verdicts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The FortiGate does not have a FortiGuard Security Rating subscription
FortiGate requires a valid FortiGuard Security Rating subscription to receive verdicts from FortiSandbox. Without this subscription, the FortiGate can submit files and see them as sent in logs, but it cannot process the returned verdicts, resulting in no action taken on the files. The Security Rating subscription enables the communication channel for verdict retrieval, distinct from the basic FortiSandbox license.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The FortiGate is using proxy-based inspection instead of flow-based
Why it's wrong here
Inspection mode does not affect verdict retrieval.
- ✗
The FortiSandbox server's IP is not added to the FortiGate's trusted hosts
Why it's wrong here
Trusted hosts affect management access, not verdict communication.
- ✓
The FortiGate does not have a FortiGuard Security Rating subscription
Why this is correct
FortiSandbox verdicts are delivered via FortiGuard rating; without the subscription, verdicts are not returned.
- ✗
The antivirus profile is set to block without scanning
Why it's wrong here
Block without scanning would prevent submission, not affect verdict retrieval.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.