最新のNSE6_EDR_AD-7.0問題集で試験を準備する

Fortinet NSE6_EDR_AD-7.0 試験概要:

Fortinet NSE6_EDR_AD-7.0 試験シラバストピック:

Fortinet NSE 6 - FortiEDR 7.0 Administrator 認定 NSE6_EDR_AD-7.0 試験問題：

問題 #1

Which two statements correctly describe the IoT probing process on FortiEDR? (Choose two answers)

A. Only healthy collectors participate in IoT probing.
B. Collectors running on servers are always used for IoT probing.
C. It identifies nearby devices by retrieving details such as hostname and IP address.
D. It captures all traffic from neighboring devices for deep packet inspection.

問題 #2

Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two answers)

A. FCS classified the event as malicious.
B. TestApplication.exe is sophisticated malware.
C. The event is marked as Handled.
D. The user was able to launch TestApplication.exe.

問題 #3

Refer to the exhibit.

Based on the exhibit, which statement about this threat hunting query is true? (Choose one answer)

A. The query is limited to detecting network activity and does not inspect process behavior.
B. RDP connections will be automatically blocked and classified as suspicious.
C. The query is configured as a global hunting rule and is automatically visible across all organizations.
D. A security incident will be generated whenever the device attempts an RDP connection.

問題 #4

Refer to the Exhibit:

Based on the FortiEDR status output shown in the exhibit, what are two reasons for the degraded state?
(Choose two answers)

A. The endpoint cannot reach the central manager.
B. The collector is installed with an incorrect port number.
C. The collector is installed with an incorrect registration password.
D. The endpoint has windows firewall enabled.

解説：