Fortinet NSE 6 - FortiEDR 7.0 Administrator - NSE6_EDR

Question 1

Refer to Exhibit.

Based on the Postman output shown in the exhibit, why is the user receiving an unauthorized error? (Choose one answer)

A. API access is disabled on the central manager.

B. FortiEDR requires a password reset the first time a user logs in.

C. The user account does not have the REST API role assigned.

D. The central manager is rejecting the request because of an unsupported HTTP method.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You added three new applications to FortiEDR using only the Path attribute. What are two expected outcomes of this configuration? (Choose two answers)

A. All instances of these applications will be blocked, regardless of location.

B. Only applications in the specified directory paths will be blocked.

C. These applications will be blocked only if the file name also matches.

D. These applications will be disabled until explicitly enabled.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

The application policy logs and application details are shown. Collector C8092231196 is a member of the Finance group. In this scenario, what must you do to block the FileZilla application? (Choose one answer)

A. Deny the application in the Finance policy.

B. Assign the Simulation Communication Control Policy to the DBA group.

C. Assign the Finance policy to a broader collector group, such as the Default Collector Group.

D. Assign the Finance policy to the DBA group.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Refer to the Exhibit:

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two answers)

A. The device is moved to isolation.

B. Playbooks are configured for this event.

C. The event has been blocked.

D. The policy is in simulation mode.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet NSE 6 - FortiEDR 7.0 Administrator - NSE6_EDR_AD-7.0 Exam Practice Test

Latest Update

Useful Links

Contact Us