A company is configuring FortiEDR and wants to ensure that security policies are effective against the latest threats. The security team wants to receive alerts when new malware is detected. What is the best way to configure this?

Manually update the threat intelligence database weekly.

Configure alerts only for critical detections.

Disable threat intelligence updates to avoid false positives.

Enable real-time threat intelligence updates and configure alert notifications for new detections.

A law firm is configuring FortiEDR and requires that all endpoint policies be auditable and that any changes be reviewed by a senior security analyst. What feature or process should the firm use to meet this requirement?

Enable policy change logging and configure an approval workflow for policy modifications.

Assign all policy management rights to a single junior administrator.

Use the default FortiEDR policies and do not make any changes.

Export policies to a spreadsheet and email them to the senior analyst for review.

A company is configuring FortiEDR and wants to ensure that security policies are applied to all new endpoints automatically. What is the most efficient way to achieve this?

Apply the policy to all endpoints by default and remove exceptions as needed.

Manually add each new endpoint to the policy group after it is deployed.

Use dynamic groups in FortiEDR that automatically include endpoints based on criteria such as OS or location.

Use a script to add new endpoints to the policy group periodically.

A global bank is deploying FortiEDR and needs to ensure that security policies are applied consistently across all branches. However, some branches have legacy systems that are not compatible with the latest policy rules. The security team must maintain a consistent security posture while ensuring legacy systems remain operational. What is the best approach?

Do not apply any policies to legacy systems to avoid compatibility issues.

Upgrade all legacy systems immediately to ensure compatibility with the standard policy.

Create a baseline policy for all endpoints and a separate, less restrictive policy for legacy systems, with a clear exception process.

Apply the same policy to all endpoints and force the legacy systems to comply.

FortinetNSE 6 - FortiSIEM Analyst

Domain 2Objective 2

Configure Security Policies NSE6-FORTISIEM-ANALYST Practice Questions (Page 2)

Part of the FortiEDR Security Settings and Policies domain, which makes up ~24% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~7–11 in this domain), expect 2–3 from this objective — we provide 13 practice questions to prepare you well beyond it. (estimate)

13questions here

3free pages

1concept

Questions 6–10

6application · medium
A company is configuring FortiEDR and wants to ensure that security policies are effective against the latest threats. The security team wants to receive alerts when new malware is detected. What is the best way to configure this?
Select an answer first
7application · medium
A law firm is configuring FortiEDR and requires that all endpoint policies be auditable and that any changes be reviewed by a senior security analyst. What feature or process should the firm use to meet this requirement?
Select an answer first
8application · medium
A company is configuring FortiEDR and wants to ensure that security policies are applied to all new endpoints automatically. What is the most efficient way to achieve this?
Select an answer first
9expert · hard
A global bank is deploying FortiEDR and needs to ensure that security policies are applied consistently across all branches. However, some branches have legacy systems that are not compatible with the latest policy rules. The security team must maintain a consistent security posture while ensuring legacy systems remain operational. What is the best approach?
Select an answer first
10foundation · easy
In FortiEDR, which component is used to define and enforce endpoint protection rules, such as which processes are allowed to run or which files are blocked?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTISIEM-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTISIEM-ANALYST” is a trademark of its owner, used for identification only.

Configure Security Policies NSE6-FORTISIEM-ANALYST Practice Questions (Page 2)

Questions 6–10

A company is configuring FortiEDR and wants to ensure that security policies are effective against the latest threats. The security team wants to receive alerts when new malware is detected. What is the best way to configure this?

A law firm is configuring FortiEDR and requires that all endpoint policies be auditable and that any changes be reviewed by a senior security analyst. What feature or process should the firm use to meet this requirement?

A company is configuring FortiEDR and wants to ensure that security policies are applied to all new endpoints automatically. What is the most efficient way to achieve this?

In FortiEDR, which component is used to define and enforce endpoint protection rules, such as which processes are allowed to run or which files are blocked?

Keep studying — FortiEDR Security Settings and Policies