最新のNSE6_EDR_AD-7.0問題集で試験を準備する

Fortinet NSE6_EDR_AD-7.0 試験概要:

Fortinet NSE6_EDR_AD-7.0 試験シラバストピック:

Fortinet NSE 6 - FortiEDR 7.0 Administrator 認定 NSE6_EDR_AD-7.0 試験問題：

1. You added three new applications to FortiEDR using only the Path attribute. What are two expected outcomes of this configuration? (Choose two answers)

A) All instances of these applications will be blocked, regardless of location.
B) These applications will be blocked only if the file name also matches.
C) These applications will be disabled until explicitly enabled.
D) Only applications in the specified directory paths will be blocked.

2. A collector attempts to access a known malicious website. FortiEDR is configured for eXtended detection with FortiAnalyzer. What two roles does Fortinet Cloud Services (FCS) perform in this process? (Choose two answers)

A) FCS identifies if a malicious event has taken place and reports the detection incident.
B) FCS sends a log record to FortiAnalyzer.
C) FCS correlates and analyzes the collected logs.
D) FCS sends OS metadata to the FortiEDR manager.

3. Refer to the Exhibit:

Based on the incident details shown in the exhibit, which two statements about this incident are true? (Choose two answers)

A) The incident is classified by the FortiEDR Core.
B) The incident occurred on only one device.
C) The incident has already been fully handled.
D) The destination IP address is blocked by FortiGate.

4. A company requires a global communication policy for a FortiEDR multi-tenant environment. Which recommendation must you make? (Choose one answer)

A) Create a new communication control policy and delegate it to other organizations.
B) Create a new communication control policy and apply it to multiple organizations.
C) Create a new communication control policy and assign it globally to all organizations.
D) Create a separate communication control policy for each organization.

質問と回答：