A network analyst is using FortiNDR Cloud to investigate a suspicious connection. The analyst wants to determine if the connection was encrypted and what protocol was used. Which metadata fields would provide this information?

Source and destination IP addresses

A threat hunter is investigating a potential intrusion that may have involved multiple stages, including initial access, command and control, and data exfiltration. The hunter wants to use the Cyber Kill Chain framework to structure the analysis. How can FortiNDR Cloud sensor data support this analysis?

By generating a single alert that covers the entire kill chain

By providing only metadata that is not useful for kill chain analysis

By providing a timeline of events that can be mapped to different kill chain phases

By automatically blocking malicious traffic at each kill chain phase

Which scenario is a common use case for deploying a FortiNDR Cloud sensor?

Managing user access to applications

Replacing the corporate firewall

Encrypting all outbound traffic

Monitoring network traffic for signs of malicious activity

In which network environment would a FortiNDR Cloud sensor be most beneficial?

A network with limited visibility into east-west traffic

A network that uses only legacy protocols

A network with no internet connectivity

A network that already has full packet capture on every segment

What is the main advantage of sensors sending metadata instead of raw packet captures to the FortiNDR Cloud platform?

Metadata includes the full payload of each packet

Metadata can be generated without any network access

Metadata reduces bandwidth and storage requirements

FortinetNSE 6 - FortiNDR Cloud Analyst

Domain 1Objective 2

Identify the FortiNDR Cloud Sensors NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 5)

Part of the Architecture and System Settings domain, which accounts for 15-25% of the NSE6-FORTINDR-CLOUD-ANALYST exam.

28questions here

6free pages

9concepts

15-25%of the exam

Questions 21–25

21application · medium
A network analyst is using FortiNDR Cloud to investigate a suspicious connection. The analyst wants to determine if the connection was encrypted and what protocol was used. Which metadata fields would provide this information?
Select an answer first
22application · medium
A threat hunter is investigating a potential intrusion that may have involved multiple stages, including initial access, command and control, and data exfiltration. The hunter wants to use the Cyber Kill Chain framework to structure the analysis. How can FortiNDR Cloud sensor data support this analysis?
Select an answer first
23foundation · easy
Which scenario is a common use case for deploying a FortiNDR Cloud sensor?
Select an answer first
24foundation · easy
In which network environment would a FortiNDR Cloud sensor be most beneficial?
Select an answer first
25foundation · easy
What is the main advantage of sensors sending metadata instead of raw packet captures to the FortiNDR Cloud platform?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTINDR-CLOUD-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTINDR-CLOUD-ANALYST” is a trademark of its owner, used for identification only.