Online Access Free NSE5_EDR-5.0 Exam Questions

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)

• A.The application is blocked by the security policies
• B.The application is ignored as the reputation score is acceptable by the security policy
• C.The application has not made any connection attempts
• D.The application is allowed in all communication control policies

A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

• A.Terminate the process and uninstall the third-party application
• B.Investigate the event to verify whether or not the application is safe
• C.Contact Fortinet support
• D.Immediately create an exception

What is the benefit of using file hash along with the file name in a threat hunting repository search?

• A.It helps to make sure the hash is really a malware
• B.It helps locate a file as threat hunting only allows hash search
• C.It helps to find if some instances of the hash are actually associated with a different file
• D.It helps to check the malware even if the malware variant uses a different file name

FortiXDR relies on which feature as part of its automated extended response?

• A.Communication Control
• B.Playbooks
• C.Security Policies
• D.Forensic