EDR quiz

Does FortiEDR Technology prevent malware infections?

• True

• False

How does FortiEDR implement post-infection protection?

• By blocking malware

• By preventing data exfiltration or encryption even after a breach occurs

• By real-time filtering to prevent malware from executing

• By detecting unusual behavior

What does FortiEDR do to protect disconnected endpoints?

• Detects file-less malware

• Provides offline protection

• Mitigates system vulnerabilities

• Uses kernel-based NGAV

What is the purpose of whitelisting/unblocking request?

• To analyze events

• To unblock valid applications

• To troubleshoot performance issues

• To prevent malware infections

Which Policy Is Violated When the Application is block during execution?

• Execution Prevention

• Exfiltration Prevention

• Device Control

• Ransomware Prevention

Which FortiEDR component enriches event data, and classifies incident?

• FortiEDR Core

• FortiEDR Collector

• FortiEDR Central Manager

• FortiEDR Cloud Services (FCS)

Which two statement about FortiEDR are true? (choose two)

• It provides central management

• It is only supported by windows OS

• It provides pre-infection and post infection

• It provides point-to-point protection

Why do we gather collector logs when the device has performance issue or system crash?

• For barbecue and grilling purposes

• When BSOD occurs

• To raise a ticket to Fortinet Support for troubleshooting

• Trouble shooting purposes

Which statement is true about flow analyzer view in forensics/Investigation?

• It displays Malware behavior

• It displays inner chakra

• It displays application details

• It displays a graphic flow diagram

What FortiEDR protection uses NGAV functionality?

• Pre-infection

• Incident Response

• Risk Mitigation

• Post Infection?