Free NSE5_EDR-5.0 Exam Dumps

No Installation Required, Instantly Prepare for the NSE5_EDR-5.0 exam and please click the below link to start the NSE5_EDR-5.0 Exam Simulator with a real NSE5_EDR-5.0 practice exam questions.
Use directly our on-line NSE5_EDR-5.0 exam dumps materials and try our Testing Engine to pass the NSE5_EDR-5.0 which is always updated.

Exam Code: NSE5_EDR-5.0
Exam Title: Fortinet NSE 5 - FortiEDR 5.0
Vendor: Fortinet
Exam Questions: 30
Last Updated: November 15th,2024

Question 1

What is the role of a collector in the communication control policy?

A. A collector blocks unsafe applications from running
B. A collector is used to change the reputation score of any application that collector runs
C. A collector records applications that communicate externally
D. A collector can quarantine unsafe applications from communicating

Correct Answer:A

Question 2

Exhibit.
NSE5_EDR-5.0 dumps exhibit
Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

A. An exception has been created for this event
B. The forensics data is displayed m the stacks view
C. The device has been isolated
D. The exfiltration prevention policy has blocked this event

Correct Answer:CD

Question 3

Refer to the exhibit.
NSE5_EDR-5.0 dumps exhibit
Based on the threat hunting query shown in the exhibit which of the following is true?

A. RDP connections will be blocked and classified as suspicious
B. A security event will be triggered when the device attempts a RDP connection
C. This query is included in other organizations
D. The query will only check for network category

Correct Answer:B

Question 4

What is the purpose of the Threat Hunting feature?

A. Delete any file from any collector in the organization
B. Find and delete all instances ofa known malicious file or hash inthe organization
C. Identify all instances of a known malicious file or hash and notify affected users
D. Execute playbooks to isolate affected collectors in the organization

Correct Answer:C

Question 5

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console
Which two statements are true about this situation? (Choose two)

A. The application is allowed in all communication control policies
B. The application is ignored as the reputation score is acceptable by the security policy
C. The application has not made any connection attempts
D. The application is blocked by the security policies

Correct Answer:AD