Fortinet NSE5_EDR-5.0 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

q1_NSE5_EDR-5.0

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

AThe NGAV policy has blocked TestApplication exe

BTestApplication exe is sophisticated malware

CThe user was able to launch TestApplication exe

DFCS classified the event as malicious

Show Answer

Question: 2

Exhibit.

q2_NSE5_EDR-5.0

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

AThe device is moved to isolation.

BPlaybooks is configured for this event.

CThe event has been blocked

DThe policy is in simulation mode

Show Answer

Question: 3

Refer to the exhibit.

q3_NSE5_EDR-5.0

Based on the threat hunting query shown in the exhibit which of the following is true?

ARDP connections will be blocked and classified as suspicious

BA security event will be triggered when the device attempts a RDP connection

CThis query is included in other organizations

DThe query will only check for network category

Show Answer

Question: 4

A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

AContact Fortinet support

BTerminate the process and uninstall the third-party application

CImmediately create an exception

DInvestigate the event to verify whether or not the application is safe

Show Answer

Question: 5

Which two types of remote authentication does the FortiEDR management console support? (Choose two.)

ARadius

BSAML

CTACACS

DLDAP

Show Answer

Fortinet NSE5_EDR-5.0 Quiz:1 Topic:1 Questions:1-5