View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #1 Discussion

Comment Image Comment Image Comment Image

A collector triggers a suspicious security incident that is initially flagged as potentially malicious. The environment is connected to the FortiEDR Cloud Service (FCS) for classification. How does FCS process the event for accurate classification? (Choose one answer)

  • A. By data processing, comprehensive automated analysis, and comprehensive manual analysis
  • B. By relying solely on the FortiGate firewall policies
  • C. By comparing the event against only local signatures
  • D. By correlating collector logs only
Correct Answer: A

Brave-Dump Community Votes

Answer: A (3 votes) 100%

Community Explanations & Comments (3)

Brave-Dumps.com Admin 6 months ago
Selected: A
Explanation — Why this answer?

FortiEDR Cloud Services uses a multi-layered approach for classification, including:

Data processing
Full automated analysis
Full manual analysis by Fortinet experts

This combination ensures highly accurate incident classification, going far beyond simple local signature-based detection.
Anonymous User 6 months ago
Selected: A
The FortiEDR Cloud Service (FCS) processes suspicious events through data processing, comprehensive automated analysis, and comprehensive manual analysis to ensure accurate classification
Anonymous User 5 months ago
Selected: A
https://community.fortinet.com/t5/FortiEDR/Threat-Coverage-FortiEDR-mitigates-the-risk-of-post-exploitation/ta-p/210312
http://docs.fortinet.com/document/fortiedr/7.2.3/administration-guide/970632/fortiedr-components
FortiEDR administration study guide p110-114
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/50bc9e02-d6cb-11f0-8b43-d2943efe5b2f/FortiEDR-7.2.1-Administration_Guide.pdf