View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 3 Discussion
Comment Image Comment Image Comment Image

Refer to the Exhibit: Based on the investigation view shown in the exhibit, which two statements about this event are true? (Choose two answers)

  • A. An exception was created for this incident.
  • B. The exfiltration prevention policy blocked this event.
  • C. The raw data is displayed in the stacks view.
  • D. The device has been isolated.
Correct Answer: A,B

Brave-Dump Clients Votes

AC 33.33%
BC 33.33%
AB 33.33%

Comments



Anonymous User 2026-04-23 06:49:31

Selected Answers: A, C


A because the checkmark. B cannot be because the Execution Prevention blocked the event and not the Exfiltration Prevention. D is not correct

Anonymous User 2026-04-24 06:59:04

Selected Answers: B, C


bc

Anonymous User 2026-05-18 23:31:32

Selected Answers: A, B


• In the exception column there is a green checkmark which means an exception was made for this incident
https://docs.fortinet.com/document/fortiedr/7.2.3/administration-guide/182447
• The edge icon shows that an action was done
https://docs.fortinet.com/document/fortiedr/7.2.3/administration-guide/999073
• No raw data is shown it is only the investigation tree
• There is no existing icon that shows that the device has been isolated.