Explain the FortiNDR Cloud Architecture NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of enrichment in FortiNDR Cloud?

   • ATo compress data to save storage space
   • BTo encrypt data in transit
   • CTo delete entities that are not relevant
   • DTo add additional context and threat intelligence to extracted entities
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   From which data sources does FortiNDR Cloud extract entity information?

   • ANetwork traffic and log data from integrated sources
   • BOnly from endpoint antivirus definitions
   • COnly from DNS server configuration files
   • DOnly from manually entered data by analysts
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What tenant administration capability does the FortiNDR Cloud portal provide?

   • ADeleting the entire cloud infrastructure
   • BManaging multiple tenants or sub-accounts under a master account
   • CChanging the physical location of the data center
   • DModifying the FortiNDR Cloud source code
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is configuring FortiNDR Cloud to receive data from multiple network sensors. The analyst wants to ensure that the data from each sensor is properly labeled with the sensor's location and purpose, so that alerts can be easily filtered and investigated. Which FortiNDR Cloud feature should the analyst use to add this contextual information to the data?

   • AAnnotation provisioning, which allows the analyst to add labels and metadata to entities and alerts.
   • BDisplay mode, which allows the analyst to customize how the data is displayed in the dashboard.
   • CSubscription provisioning, which allows the analyst to manage which data sources are subscribed to FortiNDR Cloud.
   • DEntity enrichment, which automatically adds threat intelligence context to entities.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business with limited IT staff is looking for a network detection and response solution. The business has no on-premises hardware and wants a solution that requires minimal maintenance. The business also wants to integrate threat intelligence from Fortinet's global network. Which FortiNDR offering should the business choose?

   • AFortiNDR Enterprise, because it offers the most comprehensive features for large organizations.
   • BFortiNDR Cloud, because it is a SaaS offering that requires no on-premises hardware and is maintained by Fortinet.
   • CFortiNDR Appliance, because it provides a physical device that can be deployed on-premises for maximum control.
   • DFortiNDR Virtual Appliance, because it can be deployed in the business's existing hypervisor without additional hardware.
   Reveal Solution Discussion Select an answer first