Read Online NSE5_EDR-5.0 Test Practice Test Questions Exam Dumps
Easily To Pass New NSE5_EDR-5.0 Premium Exam Updated [Mar 28, 2023]
NEW QUESTION 10
FortiXDR relies on which feature as part of its automated extended response?
- A. Playbooks
- B. Security Policies
- C. Communication Control
- D. Forensic
Answer: B
NEW QUESTION 11
How does FortiEDR implement post-infection protection?
- A. By preventing data exfiltration or encryption even after a breach occurs
- B. By insurance against ransomware
- C. By real-time filtering to prevent malware from executing
- D. By using methods used by traditional EDR
Answer: C
NEW QUESTION 12
Which FortiEDR component is required to find malicious files on the entire network of an organization?
- A. FortiEDR Aggregator
- B. FortiEDR Core
- C. FortiEDR Central Manager
- D. FortiEDR Threat Hunting Repository
Answer: A
NEW QUESTION 13
The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?
- A. Playbook actions applied to handled events
- B. Playbook actions applied to suspicious events
- C. Playbook actions applied to malicious events
- D. Playbook actions applied to inconclusive events
Answer: C
NEW QUESTION 14
What is the purpose of the Threat Hunting feature?
- A. Delete any file from any collector in the organization
- B. Find and delete all instances ofa known malicious file or hash inthe organization
- C. Identify all instances of a known malicious file or hash and notify affected users
- D. Execute playbooks to isolate affected collectors in the organization
Answer: C
NEW QUESTION 15
Refer to the exhibit.
Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)
- A. There are no MITRE details available for this event
- B. The activity event is associated with the file action
- C. The user fortinet has executed a ping command
- D. The PING EXE process was blocked
Answer: A,D
NEW QUESTION 16
What is true about classifications assigned by Fortinet Cloud Sen/ice (FCS)?
- A. FCS is responsible for all classifications
- B. FCS revises the classification of the core based on its database
- C. The core is responsible for all classifications if FCS playbooks are disabled
- D. The core only assigns a classification if FCS is not available
Answer: B
NEW QUESTION 17
Which two types of remote authentication does the FortiEDR management console support? (Choose two.)
- A. Radius
- B. LDAP
- C. TACACS
- D. SAML
Answer: A,B
NEW QUESTION 18
An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)
- A. The application is allowed in all communication control policies
- B. The application is ignored as the reputation score is acceptable by the security policy
- C. The application has not made any connection attempts
- D. The application is blocked by the security policies
Answer: A,D
NEW QUESTION 19
Exhibit.
Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)
- A. The device has been isolated
- B. The exfiltration prevention policy has blocked this event
- C. An exception has been created for this event
- D. The forensics data is displayed m the stacks view
Answer: A,B
NEW QUESTION 20
Which scripting language is supported by the FortiEDR action managed?
- A. Python
- B. Bash
- C. TCL
- D. Perl
Answer: C
NEW QUESTION 21
A company requires a global communication policy for a FortiEDR multi-tenant environment.
How can the administrator achieve this?
- A. An administrator creates a new communication control policy for each organization
- B. A local administrator creates new a communication control policy and shares it with other organizations
- C. A local administrator creates a new communication control policy and assigns it globally to all organizations
- D. An administrator creates a new communication control policy and shares it with other organizations
Answer: C
NEW QUESTION 22
......
Fortinet NSE5_EDR-5.0 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NSE5_EDR-5.0 Certification All-in-One Exam Guide Mar-2023: https://prepaway.testinsides.top/NSE5_EDR-5.0-dumps-review.html