Exam NSE5_EDR-5.0 topic 1 question 14 discussion

Actual exam question from Fortinet's NSE5_EDR-5.0

Question #: 14
Topic #: 1

What is the benefit of using file hash along with the file name in a threat hunting repository search?

A. It helps to check the malware even if the malware variant uses a different file name.
B. It helps to make sure the hash is really a malware.
C. It helps to find if some instances of the hash are actually associated with a different file.
D. It helps locate a file as threat hunting only allows hash search.

Show Suggested Answer

Suggested Answer: A 🗳️

by hugojt at March 16, 2023, 6:20 p.m.