Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

• A.The query will only check for network category
• B.A security event will be triggered when the device attempts a RDP connection
• C.RDP connections will be blocked and classified as suspicious
• D.This query is included in other organizations

Comment: *

Name: *

Email: *

Verification: *

Which two types of remote authentication does the FortiEDR management console support? (Choose two.)

• A.LDAP
• B.SAML
• C.TACACS
• D.Radius

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


The exhibits show the collector state and active connections. The collector is unable to connect to aggregator IP address 10.160.6.100 using default port.
Based on the netstat command output what must you do to resolve the connectivity issue?

• A.Reinstall collector agent and use port 6514
• B.Reinstall collector agent and use port 555
• C.Reinstall collector agent and use port 443
• D.Reinstall collector agent and use port 8081

Comment: *

Name: *

Email: *

Verification: *

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)

• A.The application has not made any connection attempts
• B.The application is allowed in all communication control policies
• C.The application is ignored as the reputation score is acceptable by the security policy
• D.The application is blocked by the security policies

Comment: *

Name: *

Email: *

Verification: *

Which security policy has all of its rules disabled by default?

• A.Ransomware Prevention
• B.Exfiltration Prevention
• C.Execution Prevention
• D.Device Control

Comment: *

Name: *

Email: *

Verification: *