NSE7 Advanced Threat Protection Practice Question
An administrator is configuring FortiDeceptor to detect threats within the network. Which TWO statements about FortiDeceptor are correct?
⚠ Common exam trap
Many exam-takers confuse FortiDeceptor's deception-based detection with traditional signature-based IDS/IPS, leading them to incorrectly select option D, or assume it requires dedicated hardware per segment (option A) due to misunderstanding its deployment flexibility.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It sends alerts to FortiSIEM or FortiSOAR for automated response
FortiDeceptor integrates with FortiSIEM and FortiSOAR to automatically trigger incident response workflows when a threat is detected. This integration allows security teams to quickly contain and remediate attacks without manual intervention, leveraging the Fortinet Security Fabric's automation capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It requires a separate hardware appliance for each network segment
Why it's wrong here
FortiDeceptor can be virtual or hardware, but not necessarily one per segment.
- ✓
It sends alerts to FortiSIEM or FortiSOAR for automated response
Why this is correct
Integration with SIEM/SOAR enables automated response to detected threats.
- ✓
It uses decoys and lures to attract attackers
Why this is correct
FortiDeceptor deploys decoy systems and lures to engage attackers.
- ✗
It uses signature-based detection to identify malware
Why it's wrong here
FortiDeceptor uses deception, not signature-based detection.
- ✗
It can replace firewall functionality
Why it's wrong here
FortiDeceptor is a deception tool, not a firewall.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.