NSE5_EDR-5.0 Practice Test Questions Updated 30 Questions [Q15-Q33]

Q15. Refer to the exhibit.

Based on the FortiEDR status output shown in the exhibit, which two statements about the FortiEDR collector are true? (Choose two.)

Q16. Exhibit.

Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

Q17. Exhibit.

Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)

Q18. Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

Q19. Refer to the exhibits.


The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

Q20. Refer to the exhibit.

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)

Q21. What is the benefit of using file hash along with the file name in a threat hunting repository search?

Q22. The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

Q23. Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

Q24. What is the purpose of the Threat Hunting feature?

Q25. Which two statements are true about the remediation function in the threat hunting module? (Choose two.)

Q26. What is true about classifications assigned by Fortinet Cloud Sen/ice (FCS)?