Category NSE5_EDR-5.0

QUESTION 11
A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

QUESTION 12
What is the benefit of using file hash along with the file name in a threat hunting repository search?

QUESTION 13
FortiXDR relies on which feature as part of its automated extended response?

QUESTION 14
Which threat hunting profile is the most resource intensive?

QUESTION 15
Which FortiEDR component is required to find malicious files on the entire network of an organization?

QUESTION 16
The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

QUESTION 17
Exhibit.

Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

QUESTION 18
Refer to the exhibits.


The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

QUESTION 19
How does FortiEDR implement post-infection protection?

QUESTION 20
An administrator needs to restrict access to the ADMINISTRATION tab inthe central manager for a specific account.
What role should the administrator assign to this account?

QUESTION 21
Which two statements about the FortiEDR solution are true? (Choose two.)

QUESTION 22
Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)