← Back to exam page

NSE5_EDR-5.0 – Fortinet NSE 5 - FortiEDR 5.0

Loading demo links...

Showing 1–3 of 5 questions

Question 1

Exhibit.

Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    The device cannot be remediated
  • ○

    The event was blocked because the certificate is unsigned
  • ○

    Device C8092231196 has been isolated
  • ○

    The execution prevention policy has blocked this event.
Question 2

An administrator finds a third party free software on a user's computer mat does not appear in me application list in the communication control console

Which two statements are true about this situation? (Choose two)

Select all that apply, then click Submit answer.

  • ○

    The application is allowed in all communication control policies
  • ○

    The application is ignored as the reputation score is acceptable by the security policy
  • ○

    The application has not made any connection attempts
  • ○

    The application is blocked by the security policies
Question 3

Which security policy has all of its rules disabled by default?

Select an option, then click Submit answer.

  • ○

    Device Control
  • ○

    Ransomware Prevention

  • ○

    Execution Prevention
  • ○

    Exfiltration Prevention