View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #25 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the Exhibit: Based on the incident details shown in the exhibit, which two statements about this incident are true? (Choose two answers)

  • A. The destination IP address is blocked by FortiGate.
  • B. The incident occurred on only one device.
  • C. The incident is classified by the FortiEDR Core.
  • D. The incident has already been fully handled.
Correct Answer: A,C

Brave-Dump Community Votes

Answer: A, C (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 5 months ago
Selected: A, C
• The exhibit shows that the IP address was added to FortiGATE malicious Ips
• There are two devices shown in the exhibit not one (cwinserv32 and cwinserv32+2) so it didn't occur on only one device
• The classification changed by Fortinet which means FortiEDR core
• The incident status is unhandled