EMT Practice Test

1. Question Content...

---

Question1: The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

Question2: Refer to the exhibits.


The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

Question3: Which scripting language is supported by the FortiEDR action managed?

Question4: What is the purpose of the Threat Hunting feature?

Question5: An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)

Question6: Which security policy has all of its rules disabled by default?

Question7: Which FortiEDR component is required to find malicious files on the entire network of an organization?

Question8: A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

Question9: Refer to the exhibit.

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)