View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam
NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 12 Discussion
Comments
Selected Answers: D
The ACI (Adversary Capability Intelligence) metric in FortiEDR indicates whether a vulnerability is actively being exploited in the wild.
A Medium severity vulnerability with confirmed active exploitation (ACI) is more urgent than a Critical vulnerability with no known exploitation (ACI: Unknown).
Therefore, Visual Studio (Medium NIST, Medium ACI) should be prioritized over Firefox (Critical NIST, ACI Unknown) because it represents a real, active threat, not just a theoretical risk.
Selected Answers: D
Selected Answers: D
https://docs.fortinet.com/document/fortiedr/7.2.3/administration-guide/255973/severity#:~:text=Component%20registration%20in%20a%20multi,files%20modification%20activity%20is%20blocked
Refer to the Exhibit: A FortiEDR analyst is prioritizing response efforts. One application has a vulnerability score of Critical but an Unknown ACI rating, while another has a Medium vulnerability score with active ACI evidence of adversary targeting. Which application must be addressed first? (Choose one answer)
Brave-Dump Clients Votes