NSE6_EDR_AD-7.0試験無料問題集（35題）「Fortinet NSE 6

出題：1

You find third-party software on a user's computer that does not appear in the application list on the communication control console. Which two statements are true about this situation? (Choose two answers)

A. The application is ignored because its reputation score is acceptable to the security policy.

B. The application is allowed in all communication control policies.

C. The application has not made any connection attempts.

D. The application is blocked by the security policies.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You added three new applications to FortiEDR using only the Path attribute. What are two expected outcomes of this configuration? (Choose two answers)

A. These applications will be disabled until explicitly enabled.

B. Only applications in the specified directory paths will be blocked.

C. These applications will be blocked only if the file name also matches.

D. All instances of these applications will be blocked, regardless of location.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which two statements correctly describe the IoT probing process on FortiEDR? (Choose two answers)

A. Collectors running on servers are always used for IoT probing.

B. Only healthy collectors participate in IoT probing.

C. It identifies nearby devices by retrieving details such as hostname and IP address.

D. It captures all traffic from neighboring devices for deep packet inspection.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A collector triggers a suspicious security incident that is initially flagged as potentially malicious. The environment is connected to the FortiEDR Cloud Service (FCS) for classification. How does FCS process the event for accurate classification? (Choose one answer)

A. By correlating collector logs only

B. By relying solely on the FortiGate firewall policies

C. By comparing the event against only local signatures

D. By data processing, comprehensive automated analysis, and comprehensive manual analysis

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE6_EDR_AD-7.0試験無料問題集「Fortinet NSE 6 - FortiEDR 7.0 Administrator 認定」