Fortinet NSE 6 - FortiEDR 7.0 Administrator 認定 NSE6_EDR_AD-7.0 試験問題:

1. Refer to the exhibit:

You configured an execution prevention exclusion with both File Name = app.exe and Path = C:\Tools. What will FortiEDR do? (Choose one answer)

A) Exclude only app.exe when it is running from C:\Tools.
B) Exclude app.exe whenever it appears.
C) Exclude all files in C:\Tools.
D) Exclude only signed versions of app.exe.

2. You discovered that a newly installed collector does not display on the Inventory tab in the central manager.
Which two troubleshooting steps must you perform? (Choose two answers)

A) Verify that TCP ports 8081 and 555 are open between the collector and the central manager.
B) Export and review the collector logs from the Central Manager for connection errors.
C) Verify that the central manager can resolve the collector hostname through DNS.
D) Check whether the FortiEDR services are running on the collector device.

3. Which two statements correctly describe the IoT probing process on FortiEDR? (Choose two answers)

A) Collectors running on servers are always used for IoT probing.
B) It identifies nearby devices by retrieving details such as hostname and IP address.
C) It captures all traffic from neighboring devices for deep packet inspection.
D) Only healthy collectors participate in IoT probing.

4. A company requires a global communication policy for a FortiEDR multi-tenant environment. Which recommendation must you make? (Choose one answer)

A) Create a new communication control policy and delegate it to other organizations.
B) Create a new communication control policy and apply it to multiple organizations.
C) Create a new communication control policy and assign it globally to all organizations.
D) Create a separate communication control policy for each organization.

質問と回答：