View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam
NSE 6 - FortiEDR 7.0 Administrator Exam Materials - Question #8 Discussion
Community Explanations & Comments (3)
Brave-Dumps.com Admin
6 months ago
Selected: C, D
Explanation — Why this answer?
In an extended detection workflow involving FortiAnalyzer, FortiEDR Cloud Services (FCS) plays two key roles:
Correlating and analyzing collected logs to identify malicious patterns
Determining whether a malicious event has occurred and reporting the detection incident
FCS does not directly send logs to FortiAnalyzer, nor does it forward OS metadata to the manager.
In an extended detection workflow involving FortiAnalyzer, FortiEDR Cloud Services (FCS) plays two key roles:
Correlating and analyzing collected logs to identify malicious patterns
Determining whether a malicious event has occurred and reporting the detection incident
FCS does not directly send logs to FortiAnalyzer, nor does it forward OS metadata to the manager.
Anonymous User
6 months ago
Selected: C, D
CD is correct
C) FCS correlates and analyzes the collected logs – FCS aggregates and processes telemetry from FortiEDR and FortiAnalyzer, applying global threat intelligence and machine learning to identify potential threats.
D) FCS identifies if a malicious event has taken place and reports the detection incident – After analysis, FCS verifies whether the event is malicious and reports the confirmed detection back to FortiEDR, triggering alerts and correlation in FortiAnalyzer.
C) FCS correlates and analyzes the collected logs – FCS aggregates and processes telemetry from FortiEDR and FortiAnalyzer, applying global threat intelligence and machine learning to identify potential threats.
D) FCS identifies if a malicious event has taken place and reports the detection incident – After analysis, FCS verifies whether the event is malicious and reports the confirmed detection back to FortiEDR, triggering alerts and correlation in FortiAnalyzer.
Anonymous User
5 months ago
Selected: C, D
In the extended detection flow with FortiAnalyzer, FCS plays two key roles:
(1) correlating and analyzing the collected logs to identify malicious patterns, and
(2) determining whether a malicious event has occurred and reporting the detection incident.
FCS does not directly send logs to FortiAnalyzer nor OS metadata to the manager.
(1) correlating and analyzing the collected logs to identify malicious patterns, and
(2) determining whether a malicious event has occurred and reporting the detection incident.
FCS does not directly send logs to FortiAnalyzer nor OS metadata to the manager.
A collector attempts to access a known malicious website. FortiEDR is configured for eXtended detection with FortiAnalyzer. What two roles does Fortinet Cloud Services (FCS) perform in this process? (Choose two answers)
Brave-Dump Community Votes