sale

Want to Unlock All Questions for this Exam?

Full Exam Access, Discussions, No Robots Checks

Fortinet NSE5_EDR-5.0 Exam Actual Questions

The questions for NSE5_EDR-5.0 were last updated on May 2, 2024.

Viewing page 1 out of 11 pages.
Viewing questions 1-4 out of 44 questions

Topic 1 - Exam A

Question #1 Topic 1

What is true about classifications assigned by Fortinet Cloud Service (FCS)?

A. FCS revises the classification of the core based on its database.
B. The core only assigns a classification if FCS is not available.
C. FCS is responsible for all classifications.
D. The core is responsible for all classifications if FCS playbooks are disabled.

Reveal Solution Discussion 7

Correct Answer: C 🗳️

Question #2 Topic 1

Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

A. The device cannot be remediated.
B. The execution prevention policy has blocked this event.
C. The event was blocked because the certificate is unsigned.
D. Device C8092231196 has been isolated.

Reveal Solution Discussion 5

Correct Answer: CD 🗳️

Question #3 Topic 1

Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

A. The NGAV policy has blocked TestApplication.exe.
B. FCS classified the event as malicious.
C. TestApplication.exe is sophisticated malware.
D. The user was able to launch TestApplication.exe.

Reveal Solution Discussion 10

Correct Answer: AB 🗳️

Question #4 Topic 1

How does FortiEDR implement post-infection protection?

A. By insurance against ransomware
B. By preventing data exfiltration or encryption even after a breach occurs
C. By real-time filtering to prevent malware from executing
D. By using methods used by traditional EDR

Reveal Solution Discussion 7

Correct Answer: B 🗳️