VCEdump

NSE5_EDR-5.0 Fortinet NSE 5 - FortiEDR 5.0

PDF question preview Back to product

Free preview

7 sample questions

The complete product contains 41 questions.

Question formats

Single choice5

Multiple choice2

Compare study plans

Fortinet · NSE5_EDR-5.0

NSE5_EDR-5.0 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

How does FortiEDR implement post-infection protection?

A
By preventing data exfiltration or encryption even after a breach occurs
B
By using methods used by traditional EDR
C
By insurance against ransomware
D
By real-time filtering to prevent malware from executing

Reveal answer details Close answer details

Correct answerA

Explanation

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortiedr.pdf

Question 2

Single choice

A company requires a global communication policy for a FortiEDR multi-tenant environment.

How can the administrator achieve this?

A
An administrator creates a new communication control policy and shares it with other organizations
B
A local administrator creates new a communication control policy and shares it with other organizations
C
A local administrator creates a new communication control policy and assigns it globally to all organizations
D
An administrator creates a new communication control policy for each organization

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

Which scripting language is supported by the FortiEDR action managed?

A
TCL
B
Python
C
Perl
D
Bash

Reveal answer details Close answer details

Correct answerB

Question 4

Multiple choice

Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

A
The NGAV policy has blocked TestApplication exe
B
TestApplication exe is sophisticated malware
C
The user was able to launch TestApplication exe
D
FCS classified the event as malicious

Reveal answer details Close answer details

Correct answersB, C

Question 5

Multiple choice

Refer to the exhibit.

Based on the FortiEDR status output shown in the exhibit, which two statements about the FortiEDR collector are true? (Choose two.)

A
The collector device has windows firewall enabled
B
The collector has been installed with an incorrect port number
C
The collector has been installed with an incorrect registration password
D
The collector device cannot reach the central manager

Reveal answer details Close answer details

Correct answersB, C

Question 6

Single choice

FortiXDR relies on which feature as part of its automated extended response?

A
Playbooks
B
Security Policies
C
Forensic
D
Communication Control

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

Refer to the exhibits.

The exhibits show the collector state and active connections. The collector is unable to connect to
aggregator IP address 10.160.6.100 using default port.

Based on the netstat command output what must you do to resolve the connectivity issue?

A
Reinstall collector agent and use port 443
B
Reinstall collector agent and use port 8081
C
Reinstall collector agent and use port 555
D
Reinstall collector agent and use port 6514

Reveal answer details Close answer details

Correct answerB