Home

Home / Fortinet / NSE5_EDR-5.0

Question list

List of questions

Question 1

(0)

What is the purpose of the Threat Hunting feature?

Question 2

(0)

How does FortiEDR implement post-infection protection?

Question 3

(0)

Exhibit. Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)

Question 4

(0)

What is the benefit of using file hash along with the file name in a threat hunting repository search?

Question 5

(0)

Exhibit. Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

Question 6

(0)

An administrator needs to restrict access to the ADMINISTRATION tab in the central manager for a specific account. What role should the administrator assign to this account?

Question 7

(0)

Refer to the exhibit. Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

Question 8

(0)

Refer to the exhibits. The exhibits show the collector state and active connections. The collector is unable to connect to aggregator IP address 10.160.6.100 using default port. Based on the n

Question 9

(0)

Refer to the exhibits. The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZi

Question 10

(0)

Refer to the exhibit. Based on the threat hunting query shown in the exhibit which of the following is true?

Open VPLUS File

Convert VPLUS to PDF

Related questions

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

Which scripting language is supported by the FortiEDR action managed?

Which two types of remote authentication does the FortiEDR management console support? (Choose two.)

Refer to the exhibits. The exhibits show the collector state and active connections. The collector is unable to connect to aggregator IP address 10.160.6.100 using default port. Based on the netstat command output what must you do to resolve the connectivity issue?

How does FortiEDR implement post-infection protection?

Refer to the exhibit. Based on the postman output shown in the exhibit why is the user getting an unauthorized error?

Refer to the exhibits. The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

Which two statements about the FortiEDR solution are true? (Choose two.)

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)

Refer to the exhibit. Based on the threat hunting query shown in the exhibit which of the following is true?

Question 1 - NSE5_EDR-5.0 discussion

Report

What is the purpose of the Threat Hunting feature?

A.

Delete any file from any collector in the organization

B.

Find and delete all instances of a known malicious file or hash in the organization

C.

Identify all instances of a known malicious file or hash and notify affected users

D.

Execute playbooks to isolate affected collectors in the organization

Show Answer

asked 18/09/2024

Peter Klaffehn

45 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first