NSE6_EDR_AD-7.0 무료 덤프문제 온라인 액세스

You are asked to configure a query to run every 15 minutes, automatically searching for specific registry modifications across all endpoints. Which FortiEDR feature must you configure? (Choose one answer)

• A.A manual query linked to a policy override
• B.A scheduled query defined within a threat hunting profile
• C.A communication control rule with a 15-minute delay
• D.A new playbook trigger based on the registry change event

Refer to the Exhibit:

A FortiEDR analyst is prioritizing response efforts. One application has a vulnerability score of Critical but an Unknown ACI rating, while another has a Medium vulnerability score with active ACI evidence of adversary targeting. Which application must be addressed first? (Choose one answer)

• A.Both applications should be treated equally because patching is necessary.
• B.The decision depends only on asset criticality, not scores.
• C.The application with the Medium vulnerability score and ACI evidence should be addressed first.
• D.The application with the Critical vulnerability score should be addressed first.

Refer to the Exhibit:

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two answers)

• A.The device is moved to isolation.
• B.The event has been blocked.
• C.The policy is in simulation mode.
• D.Playbooks are configured for this event.

A collector attempts to access a known malicious website. FortiEDR is configured for eXtended detection with FortiAnalyzer. What two roles does Fortinet Cloud Services (FCS) perform in this process? (Choose two answers)

• A.FCS identifies if a malicious event has taken place and reports the detection incident.
• B.FCS sends OS metadata to the FortiEDR manager.
• C.FCS correlates and analyzes the collected logs.
• D.FCS sends a log record to FortiAnalyzer.

Within the FortiEDR architecture, which component needs JumpBox capabilities to enable authenticated and controlled communication with FortiAnalyzer? (Choose one answer)

• A.Reputation Server
• B.Aggregator
• C.Core
• D.Central manager