Decide Fast & Get 50% Flat Discount on This SPECIAL OFFER | Limited Time Offer - Ends In COUPON CODE: SAVE50%

Free Fortinet NSE5_EDR-5.0 Questions

1. Page: 1/6
  Total 30 Questions
Question No 1

What is the purpose of the Threat Hunting feature?

Choose the Choices:

Delete any file from any collector in the organization

Find and delete all instances of a known malicious file or hash in the organization

Identify all instances of a known malicious file or hash and notify affected users

Execute playbooks to isolate affected collectors in the organization

C
Question No 2

How does FortiEDR implement post - infection protection?

Choose the Choices:

By preventing data exfiltration or encryption even after a breach occurs

By using methods used by traditional EDR

By insurance against ransomware

By real - time filtering to prevent malware from executing

D
Question No 3

Exhibit.

Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)

Choose the Choices:

The device cannot be remediated

The event was blocked because the certificate is unsigned

Device C8092231196 has been isolated

The execution prevention policy has blocked this event.

B,C
Question No 4

What is the benefit of using file hash along with the file name in a threat hunting repository search?

Choose the Choices:

It helps to make sure the hash is really a malware

It helps to check the malware even if the malware variant uses a different file name

It helps to find if some instances of the hash are actually associated with a different file

It helps locate a file as threat hunting only allows hash search

C
Question No 5

Exhibit.

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

Choose the Choices:

The device is moved to isolation.

Playbooks is configured for this event.

The event has been blocked

The policy is in simulation mode

B,D
1. Page: 1/6
  Total 30 Questions
  
  Buy Now Latest Questions
Full Access
NSE5_EDR-5.0 Exam Features

In Just $79 Access Your All Questions

All Official Questions Types

Interactive Web-Based Practice Test Software

No Installation or 3rd Party Software Required

Practice your Exam Questions (Free Demo)

24/7 Customer Support

Buy Now
Full Access
NSE5_EDR-5.0 PDF Dumps

In Just $ Access All PDF Questions

All Official Question Types

PDF Practice Questions & Answers

Printable & Portable Format

Download PDF Questions (Free Demo)

24/7 Customer Support

Buy Now