Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE6_EDR_AD-7.0 Exam - Topic 2 Question 3 Discussion

What action does an on-premises reputation server take when it receives a hash request that is not found in its local database? (Choose one answer)
C) Requests the missing hashes from the cloud reputation service
A) Ignores them until manually updated
B) Stores them locally and waits for endpoint input
D) Automatically blocks applications with unknown hashes

Fortinet NSE6_EDR_AD-7.0 Exam - Topic 2 Question 3 Discussion

Actual exam question for Fortinet's NSE6_EDR_AD-7.0 exam
Question #: 3
Topic #: 2
[All NSE6_EDR_AD-7.0 Questions]

What action does an on-premises reputation server take when it receives a hash request that is not found in its local database? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: C

The correct answer is C.

The FortiEDR 7.0.0 Administration Guide states that for on-premises deployments, the on-premise reputation service requests missing hashes from the cloud reputation service. If a proxy is not enabled, it requests the missing hashes from the cloud reputation service through the manager nginx. If a proxy is enabled, the on-premises reputation service requests the missing hashes through the proxy.

So, when the local reputation database does not contain the requested hash, the on-premises reputation server does not ignore the request, wait for endpoint input, or automatically block the application. It queries the cloud reputation service for the missing hash reputation data.

=========


Contribute your Thoughts:

0/2000 characters
Aleta
3 days ago
B could work too, but it feels a bit slow.
upvoted 0 times
...
Shonda
8 days ago
Wait, are we sure about C? What if the cloud is down?
upvoted 0 times
...
Kimberely
13 days ago
A seems like a bad idea. Ignoring requests? No way!
upvoted 0 times
...
Julieta
19 days ago
I think D sounds too aggressive. Can't just block unknown apps!
upvoted 0 times
...
Pa
24 days ago
C is the right choice! It requests missing hashes from the cloud.
upvoted 0 times
...
Amina
29 days ago
I’m leaning towards option C, but I’m a bit confused because I thought it might ignore them instead.
upvoted 0 times
...
Erinn
1 month ago
I feel like the server should automatically block unknown hashes, but that seems too aggressive.
upvoted 0 times
...
Mariann
1 month ago
I remember a practice question about how reputation servers handle unknown hashes, and I think it was about storing them locally.
upvoted 0 times
...
Flo
1 month ago
I think the server might request the missing hashes from the cloud service, but I'm not entirely sure.
upvoted 0 times
...

Save Cancel