Online Access Free NSE5_EDR-5.0 Exam Questions

A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

• A.Investigate the event to verify whether or not the application is safe
• B.Immediately create an exception
• C.Terminate the process and uninstall the third-party application
• D.Contact Fortinet support

Which FortiEDR component is required to find malicious files on the entire network of an organization?

• A.FortiEDR Aggregator
• B.FortiEDR Central Manager
• C.FortiEDR Core
• D.FortiEDR Threat Hunting Repository

A company requires a global communication policy for a FortiEDR multi-tenant environment.
How can the administrator achieve this?

• A.A local administrator creates new a communication control policy and shares it with other organizations
• B.An administrator creates a new communication control policy for each organization
• C.A local administrator creates a new communication control policy and assigns it globally to all organizations
• D.An administrator creates a new communication control policy and shares it with other organizations

Refer to the exhibit.

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)

• A.The user fortinet has executed a ping command
• B.The activity event is associated with the file action
• C.There are no MITRE details available for this event
• D.The PING EXE process was blocked