View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 29 Discussion
Comment Image Comment Image Comment Image

Refer to the exhibit. An event exception is shown. Which two statements about the exception are true? (Choose two answers)

  • A. A partial exception is applied to this event.
  • B. The exception is applied only on device C8092231196.
  • C. The system owner can modify the trigger rules parameters.
  • D. FCS playbooks are enabled by Fortinet support.
Correct Answer: C,D

Brave-Dump Clients Votes

CD 100%

Comments



Brave-Dumps.com Admin 2026-07-11 22:18:31

Selected Answers: C, D


C. The system owner can modify the trigger rules parameters.
Fortinet allows the system owner to modify the exception scope and the rule/process pairs listed under Triggered Rules.

D. FCS playbooks are enabled by Fortinet Support.
The exhibit shows a Remote Exception created and updated by FortinetCloudServices. FCS can automatically create an exception after determining that an event is safe, and the Fortinet training material states that the FCS automatic-exception playbook must be enabled by Fortinet Support.