Online Access Free NSE5_EDR-5.0 Exam Questions

Refer to the exhibit.

Based on the event exception shown in the exhibit which two statements about the exception are true? (Choose two)

• A.A partial exception is applied to this event
• B.The exception is applied only on device C8092231196
• C.FCS playbooks is enabled by Fortinet support
• D.The system owner can modify the trigger rules parameters

Which two statements about the FortiEDR solution are true? (Choose two.)

• A.It provides pre-infection and post-infection protection
• B.It provides pant-to-point protection
• C.It is Windows OS only
• D.It provides central management

How does FortiEDR implement post-infection protection?

• A.By preventing data exfiltration or encryption even after a breach occurs
• B.By real-time filtering to prevent malware from executing
• C.By using methods used by traditional EDR
• D.By insurance against ransomware

Refer to the exhibits.


The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

• A.Assign Finance policy to DBA group
• B.Deny application in Finance policy
• C.Assign Simulation Communication Control Policy to DBA group
• D.Assign Finance policy to Default Collector Group