View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 12 Discussion
Comment Image Comment Image Comment Image

Refer to the Exhibit: A FortiEDR analyst is prioritizing response efforts. One application has a vulnerability score of Critical but an Unknown ACI rating, while another has a Medium vulnerability score with active ACI evidence of adversary targeting. Which application must be addressed first? (Choose one answer)

  • A. Both applications should be treated equally because patching is necessary.
  • B. The application with the Critical vulnerability score should be addressed first.
  • C. The decision depends only on asset criticality, not scores.
  • D. The application with the Medium vulnerability score and ACI evidence should be addressed first.
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Brave-Dumps.com Admin 2026-04-19 22:17:40

Selected Answers: D


Explanation — Why this answer?

The ACI (Adversary Capability Intelligence) metric in FortiEDR indicates whether a vulnerability is actively being exploited in the wild.

A Medium severity vulnerability with confirmed active exploitation (ACI) is more urgent than a Critical vulnerability with no known exploitation (ACI: Unknown).

Therefore, Visual Studio (Medium NIST, Medium ACI) should be prioritized over Firefox (Critical NIST, ACI Unknown) because it represents a real, active threat, not just a theoretical risk.


Anonymous User 2026-04-25 11:14:56

Selected Answers: D


Correct answer: D


Anonymous User 2026-05-18 23:43:15

Selected Answers: D


• ACI Severity—Adversary Centric Intelligence (ACI) rating provided by FortiRecon leveraging FortiGuard Threat Analysts to provide comprehensive coverage of dark web, open source, and technical threat intelligence, including threat actor insights. This information enables administrators to proactively assess risks, respond faster to incidents, better understand their attackers, and protect assets. Unlike NIST that is a technical risk score context; ACI is a real-time actor behavior and intent context.
https://docs.fortinet.com/document/fortiedr/7.2.3/administration-guide/255973/severity#:~:text=Component%20registration%20in%20a%20multi,files%20modification%20activity%20is%20blocked