NSE7 Advanced Threat Protection Practice Question
Which Fortinet solution collects and correlates security events from multiple sources to provide a unified view of threats across the network?
⚠ Common exam trap
Watch out — candidates often confuse FortiSandbox or FortiEDR as the central correlation tool because they are prominent in the Fortinet Advanced Threat Protection (ATP) framework, but they lack the multi-source event aggregation and correlation that is the defining function of a SIEM like FortiSIEM.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
FortiSIEM
FortiSIEM is the correct answer because it is specifically designed as a Security Information and Event Management (SIEM) solution that aggregates, normalizes, and correlates logs and events from diverse sources—including firewalls, endpoints, servers, and cloud platforms—into a single pane of glass. It uses a patented event correlation engine and a unified event database to detect multi-stage attack patterns and provide actionable threat intelligence, fulfilling the requirement for a unified view of threats across the network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
FortiSIEM
Why this is correct
FortiSIEM collects and correlates events from various sources.
- ✗
FortiSandbox
Why it's wrong here
FortiSandbox analyzes files, not event correlation.
- ✗
FortiDeceptor
Why it's wrong here
FortiDeceptor provides deception, not event correlation.
- ✗
FortiEDR
Why it's wrong here
FortiEDR focuses on endpoint detection.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.