NSE6-EDR-AD-7-0: Fortinet NSE 6 - FortiEDR 7.0 AdministratorDemo

By Fortinet · Question Mode

QuestionQ10

FortiEDR security settings and policies

Refer to the exhibit.

Question Image

An event exception is displayed. Which two statements about the exception are correct?

Choose two
  • A FCS playbooks are enabled by Fortinet support.
  • B The system owner can modify the trigger rules parameters.
  • C A partial exception is applied to this event.
  • D The exception is applied only on device C8092231196.
Explanation

Fortinet Cloud Services (FCS) playbooks can be enabled by Fortinet Support and can automatically create an exception after FCS reclassifies an event as safe. An exception can be edited to change the rule-and-process pairs in its Triggered Rules area. The exception scope applies to all selected groups, destinations, and users, and full raw-data coverage is not a partial exception.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!