Fortinet NSE5_EDR-5.0 Exam Practice Questions Answers

Fortinet NSE 5 - FortiEDR 5.0 Exam Questions and Answers

Question 1

FortiXDR relies on which feature as part of its automated extended response?

Playbooks

Security Policies

Forensic

Communication Control

Question 2

Which scripting language is supported by the FortiEDR action managed?

TCL

Python

Perl

Bash

Question 3

What is the benefit of using file hash along with the file name in a threat hunting repository search?

It helps to make sure the hash is really a malware

It helps to check the malware even if the malware variant uses a different file name

It helps to find if some instances of the hash are actually associated with a different file

It helps locate a file as threat hunting only allows hash search

Question 4

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

RDP connections will be blocked and classified as suspicious

A security event will be triggered when the device attempts a RDP connection

This query is included in other organizations

The query will only check for network category