NSE6_EDR_AD-7.0

Review 34 NSE6-EDR-AD-7-0 practice questions with answer explanations and community insights.

Question 1

Which two statements correctly describe the IoT probing process on FortiEDR? (Choose two.)

  1. Collectors running on servers are always used for IoT probing.
  2. It identifies nearby devices by retrieving details such as hostname and IP address.
  3. Only healthy collectors participate in IoT probing.
  4. It captures all traffic from neighboring devices for deep packet inspection.

Question 2

What action does an on-premises reputation server take when it receives a hash request that is not found in its local database?

  1. Automatically blocks applications with unknown hashes
  2. Ignores them until manually updated
  3. Requests the missing hashes from the cloud reputation service
  4. Stores them locally and waits for endpoint input

Question 3

A collector triggers a suspicious security incident that is initially flagged as potentially malicious.The environment is connected to the FortiEDR Cloud Service (FCS) for classification.How does FCS process the event for accurate classification?

  1. By comparing the event against only local signatures
  2. By correlating collector logs only
  3. By relying solely on the FortiGate firewall policies
  4. By data processing, comprehensive automated analysis, and comprehensive manual analysis

Question 4

An employee leaves the company and no longer has access to the FortiEDR system. You must ensure GDPR compliance regarding the employee’s personal data stored in FortiEDR.Which two data types must be removed to meet GDPR requirements? (Choose two.)

  1. Installed applications
  2. Installed OS name
  3. Device and user name
  4. IP address and MAC address

Question 5

Refer to the exhibit.You are asked to block applications based on hash attributes.Which two factors must you consider when applying the hash value? (Choose two.)

  1. Hashes must follow supported formats.
  2. Hashes must be used with at least one attribute, such as a filename or path.
  3. Hashes must be unique to each application.
  4. Hashes must be line-separated.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.