Identify the FortiNDR Cloud Sensors NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does sensor data align with the Cyber Kill Chain framework?

   • ABy automatically disrupting attacks at each stage
   • BBy replacing the need for incident response
   • CBy providing evidence of activities that correspond to different kill chain stages
   • DBy assigning a severity score to each stage
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which event type is generated by a FortiNDR Cloud sensor when it observes a DNS query?

   • AHTTP event
   • BFile event
   • CDNS event
   • DConnection event
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What type of event would a sensor generate when it observes a client establishing a TCP session with a server?

   • AHTTP event
   • BAuthentication event
   • CConnection event
   • DDNS event
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A threat intelligence analyst is correlating FortiNDR Cloud sensor data with external threat intelligence feeds. The analyst wants to identify indicators of compromise (IOCs) that are relevant to the organization's environment. Which approach best leverages sensor data for this purpose?

   • ACompare sensor-generated metadata fields (e.g., IPs, domains) against IOC lists from threat feeds
   • BDisable sensor metadata collection to reduce noise and focus on packet captures
   • CUse sensor packet captures to search for malware signatures
   • DRely on sensor-generated alerts to automatically identify all IOCs
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a metadata field that a sensor might produce?

   • AThe sensor's firmware version
   • BSource and destination IP addresses
   • CThe full HTTP request body
   • DThe user's password hash
   Reveal Solution Discussion Select an answer first