View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam

NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #38 Discussion

Comment Image Comment Image Comment Image

An endpoint triggers a suspicious security event that is initially flagged as potentially malicious. The environment is connected to the FortiEDR Cloud Service (FCS) for classification. If FCS reclassifies the event as Safe, what happens next? (Choose one answer)

  • A. The event is logged but remains active.
  • B. The event automatically expires, and an exception is created.
  • C. The collector group is disabled for safety.
  • D. The system generates a scheduled query report.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (1 vote) 100%

Community Explanations & Comments (1)

Brave-Dumps.com Admin 3 months ago
Selected: B
Correct answer: B. The event automatically expires, and an exception is created.

When FCS reclassifies the event as Safe, FortiEDR can push an automated cross-environment exception downstream. The exception expires the existing event and prevents the same activity from triggering again.