Explain the FortiNDR Cloud Architecture NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In the Fortinet security portfolio, what is the primary positioning of FortiNDR Cloud relative to traditional security tools?

   • AIt is a vulnerability management scanner for on-premises infrastructure
   • BIt is an endpoint protection platform (EPP) that secures individual devices
   • CIt replaces the firewall as the primary network security control
   • DIt provides network traffic analysis and detection to complement prevention-focused controls
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What type of information does FortiNDR Cloud extract from network traffic to identify entities?

   • AOnly the source and destination MAC addresses
   • BThe physical location of the user
   • COnly user passwords and credentials
   • DIP addresses, domains, and file hashes
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A global enterprise is deploying FortiNDR Cloud and needs to manage access for its security team. The team includes analysts who need to view alerts and investigate incidents, and administrators who need to manage users and configure data sources. The enterprise also has a requirement that analysts from different regions should only see alerts from their respective regions. Which portal management approach should the enterprise use to meet these requirements?

   • ACreate a single tenant and use annotation provisioning to tag alerts with the region, then filter by tag.
   • BCreate separate tenants for each region and assign analysts and administrators appropriate roles within each tenant.
   • CCreate a single tenant and use display mode to filter the dashboard for each region.
   • DCreate a single tenant and assign analysts the 'Viewer' role and administrators the 'Admin' role, with no regional data separation.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the role of the back-end analytics engine in FortiNDR Cloud?

   • ATo apply detection logic and identify potential threats
   • BTo manage customer billing and subscriptions
   • CTo store raw packet captures indefinitely
   • DTo render the user interface for analysts
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A compliance officer at a financial institution is reviewing the data retention policies of FortiNDR Cloud. The institution is required to retain security event logs for at least 12 months for regulatory audits. The security team needs to ensure that the raw network traffic metadata and detection events are available for the full retention period. What should the security team configure in the FortiNDR Cloud portal to meet this requirement?

   • AExport all detection events to an external SIEM on a daily basis to ensure long-term storage.
   • BContact Fortinet support to request a custom retention period that exceeds the standard maximum.
   • CAdjust the data retention policy settings to the maximum retention period available in the portal.
   • DEnable the 'Compliance Mode' feature, which automatically extends data retention to 24 months.
   Reveal Solution Discussion Select an answer first