NSE5_EDR-5.0 Practice Online

Question 1

Exhibit.

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

A : The device is moved to isolation.

B : Playbooks is configured for this event.

C : The event has been blocked

D : The policy is in simulation mode

Answer: B,D

Question 2

Which scripting language is supported by the FortiEDR action managed?

A : TCL

B : Python

C : Perl

D : Bash

Answer: A

Question 3

Refer to the exhibits.

The exhibits show application policy logs and application details Collector C8092231196 is a member of the

Finance group

What must an administrator do to block the FileZilia application?

A :

Deny application in Finance policy

B :

Assign Finance policy to DBA group

C : Assign Finance policy to Default Collector Group

D : Assign Simulation Communication Control Policy to DBA group

Answer: D

Name:	Fortinet NSE 5 - FortiEDR 5.0
Exam Code:	NSE5_EDR-5.0
Certification:	NSE 5 Network Security Analyst
Vendor:	Fortinet
Total Questions:	30
Last Updated:	May 09, 2024