Online Access Free NSE5_EDR-5.0 Exam Questions

What is the purpose of the Threat Hunting feature?

• A.Delete any file from any collector in the organization
• B.Identify all instances of a known malicious file or hash and notify affected users
• C.Find and delete all instances ofa known malicious file or hash inthe organization
• D.Execute playbooks to isolate affected collectors in the organization

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

• A.The query will only check for network category
• B.This query is included in other organizations
• C.A security event will be triggered when the device attempts a RDP connection
• D.RDP connections will be blocked and classified as suspicious

How does FortiEDR implement post-infection protection?

• A.By using methods used by traditional EDR
• B.By insurance against ransomware
• C.By preventing data exfiltration or encryption even after a breach occurs
• D.By real-time filtering to prevent malware from executing

FortiXDR relies on which feature as part of its automated extended response?

• A.Playbooks
• B.Forensic
• C.Communication Control
• D.Security Policies