Explain the FortiNDR Cloud Architecture NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the default data retention policy for FortiNDR Cloud?

   • AData is retained for a defined period based on the subscription plan
   • BData is deleted immediately after analysis
   • CData is retained only for 24 hours
   • DData is retained indefinitely for all customers
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key consumption characteristic of the FortiNDR Cloud SaaS model?

   • ACustomers must purchase and maintain dedicated hardware to run the service
   • BCustomers access the service through a subscription and use a web-based interface
   • CCustomers must deploy agents on every endpoint to send data to the service
   • DCustomers are responsible for patching the underlying operating system
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst is reviewing a FortiNDR Cloud alert that was triggered by a suspicious file transfer. The alert includes the file name, file size, and the source and destination IP addresses. The analyst wants to know if the file has been seen before in the environment and if it is associated with any known malware. Which FortiNDR Cloud process should the analyst rely on to provide this information?

   • AEntity information extraction, which identifies the file as an entity and extracts its properties from the traffic.
   • BIntelligence correlation, which links the file to other related alerts and entities in the environment.
   • CDetection matching, which compares the file's properties against known detection signatures.
   • DEnrichment, which adds context to the file entity by querying threat intelligence and historical data.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which Fortinet offering is a cloud-delivered network detection and response (NDR) service that analyzes network traffic and provides threat detection without requiring on-premises hardware?

   • AFortiSandbox
   • BFortiNDR Cloud
   • CFortiAnalyzer
   • DFortiGate Next-Generation Firewall
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security analyst is preparing a presentation for executives to show the top threats detected in the last quarter. The analyst wants to display the dashboard in a way that hides sensitive internal IP addresses and focuses only on high-level threat categories. Which FortiNDR Cloud feature should the analyst use to configure the dashboard for this presentation?

   • AEntity enrichment to add more context to the threats so the executives can understand them better.
   • BSubscription provisioning to grant the executives temporary access to the dashboard.
   • CDisplay mode, which allows the analyst to customize the dashboard view to show only the desired information and hide sensitive details.
   • DAnnotation provisioning to add labels to the threats for the executive audience.
   Reveal Solution Discussion Select an answer first