View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #22 Discussion

Comment Image Comment Image Comment Image

You are asked to configure a query to run every 15 minutes, automatically searching for specific registry modifications across all endpoints. Which FortiEDR feature must you configure? (Choose one answer)

  • A. A communication control rule with a 15-minute delay
  • B. A manual query linked to a policy override
  • C. A scheduled query defined within a threat hunting profile
  • D. A new playbook trigger based on the registry change event
Correct Answer: C

Brave-Dump Community Votes

Answer: C (3 votes) 100%

Community Explanations & Comments (3)

Brave-Dumps.com Admin 6 months ago
Selected: C
Explanation — Why this answer?

In FortiEDR, Threat Hunting Profiles allow you to configure scheduled queries that run automatically at defined intervals (e.g., every 15 minutes).

This is the only feature that provides time-based automation for searching events such as registry modifications.
Anonymous User 6 months ago
Selected: C
C
Only a scheduled query in a threat hunting profile supports periodic, automated searches across endpoints.
Anonymous User 5 months ago
Selected: C
FortiEDR Administrator Study guide 7.0 p213
https://training.fortinet.com/pluginfile.php/3546652/mod_resource/content/26/FortiEDR_7.0_Administrator_Study_Guide-Online.pdf?forcedownload=1