Fortinet NSE5_EDR-5.0 Exam Practice Test Instant Access

Question 1

Which two statements about the FortiEDR solution are true? (Choose two.)

AIt provides pre-infection and post-infection protection

BIt is Windows OS only

CIt provides central management

DIt provides pant-to-point protection

Answer : A, D

Question 2

Which security policy has all of its rules disabled by default?

ADevice Control

BRansomware Prevention

CExecution Prevention

DExfiltration Prevention

Answer : B

Question 3

Which FortiEDR component is required to find malicious files on the entire network of an organization?

AFortiEDR Aggregator

BFortiEDR Central Manager

CFortiEDR Threat Hunting Repository

DFortiEDR Core

Answer : A

Question 4

Which scripting language is supported by the FortiEDR action managed?

ATCL

BPython

CPerl

DBash

Answer : A

Question 5

A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

AContact Fortinet support

BTerminate the process and uninstall the third-party application

CImmediately create an exception

DInvestigate the event to verify whether or not the application is safe

Answer : C

Question 6

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console

Which two statements are true about this situation? (Choose two)

AThe application is allowed in all communication control policies

BThe application is ignored as the reputation score is acceptable by the security policy

CThe application has not made any connection attempts

DThe application is blocked by the security policies

Answer : A, D

Question 7

Refer to the exhibit.

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true? (Choose two.)

AThe PING EXE process was blocked

BThe user fortinet has executed a ping command

CThe activity event is associated with the file action

DThere are no MITRE details available for this event

Answer : A, D

Fortinet NSE5_EDR-5.0 Fortinet NSE 5 - FortiEDR 5.0 Exam Practice Test