Which security policy has all of its rules disabled by default?

1. A. Device Control
2. B. Ransomware Prevention
3. C. Execution Prevention
4. D. Exfiltration Prevention

Correct Answer: B

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

1. A. FortiNAC
2. B. FortiGate
3. C. FortiSiem
4. D. FortiSandbox

Correct Answer: BC

Which two types of remote authentication does the FortiEDR management console support? (Choose two.)

1. A. Radius
2. B. SAML
3. C. TACACS
4. D. LDAP

Correct Answer: AD

What is the purpose of the Threat Hunting feature?

1. A. Delete any file from any collector in the organization
2. B. Find and delete all instances ofa known malicious file or hash inthe organization
3. C. Identify all instances of a known malicious file or hash and notify affected users
4. D. Execute playbooks to isolate affected collectors in the organization

Correct Answer: C

What is the benefit of using file hash along with the file name in a threat hunting repository search?

1. A. It helps to make sure the hash is really a malware
2. B. It helps to check the malware even if the malware variant uses a different file name
3. C. It helps to find if some instances of the hash are actually associated with a different file
4. D. It helps locate a file as threat hunting only allows hash search

Correct Answer: C