Implement Detectors NSE6-FORTINDR-CLOUD-ANALYST Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   What is the primary goal of tuning a detector's sensitivity and thresholds in FortiNDR Cloud?

   • ATo increase the number of alerts generated
   • BTo reduce false positives and improve detection accuracy
   • CTo expand the detector's run list to include more assets
   • DTo change the detector's name and description
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare organization has a detector for 'Ransomware Activity' that is missing actual ransomware infections because the threshold is set too high. The analyst needs to make the detector more sensitive to catch these infections while minimizing the increase in false positives. What should the analyst do?

   • ALower the detector's threshold to trigger on fewer events
   • BIncrease the detector's threshold to require more events
   • CDisable the detector and rely on manual monitoring
   • DRemove all IPs from the run list to monitor all assets
   Reveal Solution Discussion Select an answer first