View all questions & answers for the NSE 6 - FortiEDR 7.0 Administrator Exam Materials exam


NSE 6 - FortiEDR 7.0 Administrator Exam Materials-Question 11 Discussion

Refer to the exhibit. What observation can you make about the ConnectivityTestAppNew.exe incident? (Choose one answer)

  • A. A rule assigned action is set to block but the policy is in simulation mode.
  • B. The incident has not been handled by a console administrator.
  • C. The incident was archived from the console unhandled.
  • D. The incident was handled automatically by the communication control policy.
Correct Answer: A

Brave-Dump Clients Votes

A 100%

Comments



Brave-Dumps.com Admin 2026-04-19 22:18:27

Selected Answers: A


Explanation — Why this answer?

The action icon (⊘) on the events indicates a simulated blocking action, not actually enforced, in FortiEDR.

This behavior is characteristic of simulation mode, where rules are evaluated but blocking actions are not executed in reality.

This is already the selected answer (blue dot) in the exhibit.