View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 25 Discussion
Comment Image Comment Image Comment Image

Refer to the Exhibit: Based on the incident details shown in the exhibit, which two statements about this incident are true? (Choose two answers)

  • A. The destination IP address is blocked by FortiGate.
  • B. The incident occurred on only one device.
  • C. The incident is classified by the FortiEDR Core.
  • D. The incident has already been fully handled.
Correct Answer: A,C

Brave-Dump Clients Votes

AC 100%

Comments



Anonymous User 2026-05-18 23:59:45

Selected Answers: A, C


• The exhibit shows that the IP address was added to FortiGATE malicious Ips
• There are two devices shown in the exhibit not one (cwinserv32 and cwinserv32+2) so it didn't occur on only one device
• The classification changed by Fortinet which means FortiEDR core
• The incident status is unhandled