最新のNSE6_EDR_AD-7.0問題集で試験を準備する

Fortinet NSE6_EDR_AD-7.0 試験概要:

Fortinet NSE6_EDR_AD-7.0 試験シラバストピック:

Fortinet NSE 6 - FortiEDR 7.0 Administrator 認定 NSE6_EDR_AD-7.0 試験問題：

1. Refer to the exhibit:

You are asked to block applications based on hash attributes. Which two factors must you consider when applying the hash value? (Choose two answers)

A) Hashes must be used with at least one attribute, such as a filename or path.
B) Hashes must be line-separated.
C) Hashes must be unique to each application.
D) Hashes must follow supported formats.

2. A company requires a global communication policy for a FortiEDR multi-tenant environment. Which recommendation must you make? (Choose one answer)

A) Create a new communication control policy and delegate it to other organizations.
B) Create a new communication control policy and apply it to multiple organizations.
C) Create a new communication control policy and assign it globally to all organizations.
D) Create a separate communication control policy for each organization.

3. What specific action does FortiEDR take when the Zero Trust Device Tagging playbook is activated?
(Choose one answer)

A) It removes unmanaged endpoints from FortiClient EMS.
B) It updates FortiClient EMS through an API and assigns a classification fabric tag.
C) It disables the endpoint until a tag is assigned.
D) It assigns a default tag to all endpoints.

4. You added three new applications to FortiEDR using only the Path attribute. What are two expected outcomes of this configuration? (Choose two answers)

A) All instances of these applications will be blocked, regardless of location.
B) These applications will be blocked only if the file name also matches.
C) These applications will be disabled until explicitly enabled.
D) Only applications in the specified directory paths will be blocked.

質問と回答：