You are asked to create a playbook to isolate a device with a collector. Which action category does isolating a device with a collector fall under? (Choose one answer)

A. Investigation
B. Remediation
C. Custom
D. Notifications

Correct Answer: A

Brave-Dump Clients Votes

B 66.67%

A 33.33%

Comments

Brave-Dumps.com Admin 2026-04-19 22:12:45

Selected Answers: B

Explanation — Why this answer?

In FortiEDR, device isolation is classified as a Remediation action.

Remediation actions are designed to contain and neutralize threats, for example by isolating compromised devices from the network.

Other categories serve different purposes:

Investigation → collecting evidence
Notifications → generating alerts
Custom → executing user-defined actions

Anonymous User 2026-04-25 11:21:09

Selected Answers: B

Isolating a device with a collector falls under Remediation

Anonymous User 2026-05-18 23:49:00

Selected Answers: A

FortiEDR administration guide 7.2.1 p254-255
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/50bc9e02-d6cb-11f0-8b43-d2943efe5b2f/FortiEDR-7.2.1-Administration_Guide.pdf