Identify the FortiNDR Cloud Sensors NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security architect is designing a FortiNDR Cloud deployment for a high-traffic data center. The architect is concerned about the volume of data generated by the sensors and its impact on network bandwidth and storage. The architect wants to reduce the data volume while still maintaining sufficient visibility for threat detection. Which approach best balances data volume and detection capability?

   • AEnable packet capture for all traffic to ensure complete visibility
   • BEnable metadata generation and selectively capture packets for traffic that matches specific detection rules
   • CReduce the sensor's sampling rate to capture only a percentage of traffic
   • DDisable packet capture and rely solely on metadata
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes how FortiNDR Cloud sensors contribute to threat detection?

   • AThey collect network data and forward it to the FortiNDR Cloud platform for analysis
   • BThey provide raw packet captures directly to the analyst for manual review
   • CThey replace the need for endpoint security solutions
   • DThey actively block malicious traffic at the network edge
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A SOC analyst is reviewing FortiNDR Cloud events and sees a series of HTTP events from an internal host to a known malicious URL. The analyst wants to understand the potential impact and map this to the MITRE ATT&CK framework. Which ATT&CK tactic is most likely associated with this event?

   • AInitial Access
   • BThe tactic cannot be determined from the HTTP event alone
   • CExfiltration
   • DCommand and Control
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which security framework categorizes the stages of an attack from initial reconnaissance to actions on objectives?

   • ACOBIT
   • BCyber Kill Chain
   • CISO 27001
   • DNIST SP 800-53
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary role of a FortiNDR Cloud sensor in a network?

   • ATo store all raw packets for long-term forensic analysis
   • BTo replace the existing firewall and provide intrusion prevention
   • CTo block malicious traffic in real time by enforcing firewall rules
   • DTo passively monitor network traffic and generate metadata for threat detection
   Reveal Solution Discussion Select an answer first