View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 38 Discussion
Comment Image Comment Image Comment Image

An endpoint triggers a suspicious security event that is initially flagged as potentially malicious. The environment is connected to the FortiEDR Cloud Service (FCS) for classification. If FCS reclassifies the event as Safe, what happens next? (Choose one answer)

  • A. The event is logged but remains active.
  • B. The event automatically expires, and an exception is created.
  • C. The collector group is disabled for safety.
  • D. The system generates a scheduled query report.
Correct Answer: B

Brave-Dump Clients Votes

B 100%

Comments



Brave-Dumps.com Admin 2026-07-11 22:59:59

Selected Answers: B


Correct answer: B. The event automatically expires, and an exception is created.

When FCS reclassifies the event as Safe, FortiEDR can push an automated cross-environment exception downstream. The exception expires the existing event and prevents the same activity from triggering again.