NSE6_EDR_AD-7.0無料問題集「Fortinet NSE 6 - FortiEDR 7.0 Administrator」

質問 1

Refer to the exhibit:

You are asked to block applications based on hash attributes. Which two factors must you consider when applying the hash value? (Choose two answers)

（A）Hashes must be unique to each application.

（B）Hashes must be used with at least one attribute, such as a filename or path.

（C）Hashes must be line-separated.

（D）Hashes must follow supported formats.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit:

You configured an execution prevention exclusion with both File Name = app.exe and Path = C:\Tools. What will FortiEDR do? (Choose one answer)

（A）Exclude only signed versions of app.exe.

（B）Exclude only app.exe when it is running from C:\Tools.

（C）Exclude all files in C:\Tools.

（D）Exclude app.exe whenever it appears.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You are asked to configure a query to run every 15 minutes, automatically searching for specific registry modifications across all endpoints. Which FortiEDR feature must you configure? (Choose one answer)

（A）A new playbook trigger based on the registry change event

（B）A scheduled query defined within a threat hunting profile

（C）A communication control rule with a 15-minute delay

（D）A manual query linked to a policy override

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two answers)

（A）The event is marked as Handled.

（B）FCS classified the event as malicious.

（C）TestApplication.exe is sophisticated malware.

（D）The user was able to launch TestApplication.exe.

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE6_EDR_AD-7.0 無料問題集「Fortinet NSE 6 - FortiEDR 7.0 Administrator」

弊社を連絡する

関連リンク

トップ試験