View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #29 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. An event exception is shown. Which two statements about the exception are true? (Choose two answers)

  • A. A partial exception is applied to this event.
  • B. The exception is applied only on device C8092231196.
  • C. The system owner can modify the trigger rules parameters.
  • D. FCS playbooks are enabled by Fortinet support.
Correct Answer: C,D

Brave-Dump Community Votes

Answer: C, D (1 vote) 100%

Community Explanations & Comments (1)

Brave-Dumps.com Admin 3 months ago
Selected: C, D
C. The system owner can modify the trigger rules parameters.
Fortinet allows the system owner to modify the exception scope and the rule/process pairs listed under Triggered Rules.

D. FCS playbooks are enabled by Fortinet Support.
The exhibit shows a Remote Exception created and updated by FortinetCloudServices. FCS can automatically create an exception after determining that an event is safe, and the Fortinet training material states that the FCS automatic-exception playbook must be enabled by Fortinet Support.