NO.18 A company requires a global communication policy for a FortiEDR multi-tenant environment.
How can the administrator achieve this?

NO.19 Which two statements are true about the remediation function in the threat hunting module? (Choose two.)

NO.20 An administrator needs to restrict access to the ADMINISTRATION tab inthe central manager for a specific account.
What role should the administrator assign to this account?

NO.21 Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

NO.22 Refer to the exhibits.


The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

NO.23 What is true about classifications assigned by Fortinet Cloud Sen/ice (FCS)?

NO.24 How does FortiEDR implement post-infection protection?

NO.25 Exhibit.

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

NO.26 What is the role of a collector in the communication control policy?

NO.27 Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

NO.28 Refer to the exhibits.


The exhibits show the collector state and active connections. The collector is unable to connect to aggregator IP address 10.160.6.100 using default port.
Based on the netstat command output what must you do to resolve the connectivity issue?

NO.29 Which scripting language is supported by the FortiEDR action managed?