NSE6-FDLP-26 Practice Questions & Answers • ExamPrepare

16 questions in this view

Page 1 of 3

Question 1

Which behavior does the FortiDLP agent exhibit when the endpoint goes off the network?

The agent spools events based on the configuration locally until network connectivity is restored.
The agent discards the low-severity events but spools the medium and critical-severity events.
The agents discard the events.
The agent spools the critical-severity events but discards the low and medium-severity events.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

The following values simplify policy creation by acting as building blocks that define user activity, risk, and allowed data movement.

discord.com/channels/**
8.8.8.8
\b((?:[0-9]{9})|(?:[0-9]{3}-[0-9]{2}-[0-9]{4})|(?:[0-9]{3} [0-9]{2} [0-9]{4}))\b

Where on the FortiDLP console does the administrator define them?

Incident sequence rules
Policy assets
Policy templates
Incident clustering rules

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibits.

An analyst was alerted about an incident raised by the FortiDLP console.

Upon review, what can the analyst conclude about the incident?

Sequence rule

Events

The incident covers four stages of the MITRE ATT&CK framework.
The events detected are monitoring only GenAI SaaS applications.
This is a clustered incident.
You are seeing multiple occurrences of a user trying to download from an unsanctioned drive.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibit.

An administrator has been tasked with reviewing the inventory of all SaaS applications your organization monitors.

Which observation can the administrator make about access to and usage of SaaS applications?

SaaS applications

ChatGPT has a high risk score, so users will be warned before using it.
Dropbox has been blocked from use.
Access to Google Drive will be blocked until the review is complete.
Personal emails are used by users to sign in instead of company domains.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which two factors differentiate FortiDLP from legacy DLP solutions? (Choose two.)

FortiDLP provides single alerts but not sequenced alerts which are possible through legacy DLP solutions.
FortiDLP provides in-depth insights into SaaS and GenAI solutions as opposed to limited visibility by legacy DLP solutions.
FortiDLP gathers forensics in the form of files, screenshots, and fingerprinting as opposed to only file forensics by legacy DLP.
FortiDLP doesn’t require policies to be applied for visibility into user data.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit.

What can the administrator conclude about the agent configuration file that was created?

Agent configuration

The FortiDLP browser extension will be installed on all browsers except Safari.
Nodes must be labeled Windows and engineering to receive the configuration.
Users will be able to start or stop the FortiDLP agent service locally.
Content inspection is enabled for nodes.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.