Online NSE5_EDR-5.0 Practice TestMore Fortinet Products >

Free Fortinet NSE5_EDR-5.0 Exam Dumps Questions

Fortinet NSE5_EDR-5.0: Fortinet NSE 5 - FortiEDR 5.0

- Get instant access to NSE5_EDR-5.0 practice exam questions

- Get ready to pass the Fortinet NSE 5 - FortiEDR 5.0 exam right now using our Fortinet NSE5_EDR-5.0 exam package, which includes Fortinet NSE5_EDR-5.0 practice test plus an Fortinet NSE5_EDR-5.0 Exam Simulator.

- The best online NSE5_EDR-5.0 exam study material and preparation tool is here.

4.5

(5490 ratings)

Question 1

Refer to the exhibit.
NSE5_EDR-5.0 dumps exhibit
Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

A. The NGAV policy has blocked TestApplication exe

B. TestApplication exe is sophisticated malware

C. The user was able to launch TestApplication exe

D. FCS classified the event as malicious

Correct Answer:AB

Question 2

The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

A. Playbook actions applied to inconclusive events

B. Playbook actions applied to handled events

C. Playbook actions applied to suspicious events

D. Playbook actions applied to malicious events

Correct Answer:D

Question 3

What is true about classifications assigned by Fortinet Cloud Sen/ice (FCS)?

A. The core is responsible for all classifications if FCS playbooks are disabled

B. The core only assigns a classification if FCS is not available

C. FCS revises the classification of the core based on its database

D. FCS is responsible for all classifications

Correct Answer:C

Question 4

Which security policy has all of its rules disabled by default?

A. Device Control

B. Ransomware Prevention

C. Execution Prevention

D. Exfiltration Prevention

Correct Answer:B

Question 5

Refer to the exhibits.
NSE5_EDR-5.0 dumps exhibit

The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group
What must an administrator do to block the FileZilia application?

A. Deny application in Finance policy

B. Assign Finance policy to DBA group

C. Assign Finance policy to Default Collector Group

D. Assign Simulation Communication Control Policy to DBA group

Correct Answer:D

Question 6

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

A. FortiNAC

B. FortiGate

C. FortiSiem

D. FortiSandbox

Correct Answer:BC

START NSE5_EDR-5.0 EXAM