Ultimate Guide to Prepare Free Fortinet NSE5_EDR-5.0 Exam Questions & Answer [Q13-Q27]

Posted byadminNovember 26, 2023Leave a Comment on Ultimate Guide to Prepare Free Fortinet NSE5_EDR-5.0 Exam Questions & Answer [Q13-Q27]

Rate this post

Ultimate Guide to Prepare Free Fortinet NSE5_EDR-5.0 Exam Questions and Answer

Pass Fortinet NSE5_EDR-5.0 Tests Engine pdf – All Free Dumps

The primary objective of the Fortinet NSE5_EDR-5.0 exam is to assess the knowledge and skills of candidates in endpoint detection and response using FortiEDR 5.0. NSE5_EDR-5.0 exam tests the candidate’s ability to perform tasks such as identifying and analyzing endpoint threats, investigating endpoint incidents, and responding to endpoint attacks. NSE5_EDR-5.0 exam also tests the candidate’s knowledge of endpoint protection technologies and their ability to implement and manage endpoint protection solutions.

NEW QUESTION 13
Exhibit.

Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

An exception has been created for this event

The forensics data is displayed m the stacks view

The device has been isolated

The exfiltration prevention policy has blocked this event

NEW QUESTION 14
What is the role of a collector in the communication control policy?

A collector blocks unsafe applications from running

A collector is used to change the reputation score of any application that collector runs

A collector records applications that communicate externally

A collector can quarantine unsafe applications from communicating

NEW QUESTION 15
An administrator finds a third party free software on a user’s computer mat does not appear in me application list in the communication control console Which two statements are true about this situation? (Choose two)

The application is allowed in all communication control policies

The application is ignored as the reputation score is acceptable by the security policy

The application has not made any connection attempts

The application is blocked by the security policies

NEW QUESTION 16
Which security policy has all of its rules disabled by default?

Device Control

Ransomware Prevention

Execution Prevention

Exfiltration Prevention

NEW QUESTION 17
Refer to the exhibits.

The exhibits show application policy logs and application details Collector C8092231196 is a member of the Finance group What must an administrator do to block the FileZilia application?

Deny application in Finance policy

Assign Finance policy to DBA group

Assign Finance policy to Default Collector Group

Assign Simulation Communication Control Policy to DBA group

NEW QUESTION 18
Which two types of remote authentication does the FortiEDR management console support? (Choose two.)

Radius

SAML

TACACS

LDAP

NEW QUESTION 19
Refer to the exhibits.

The exhibits show the collector state and active connections. The collector is unable to connect to aggregator IP address 10.160.6.100 using default port.
Based on the netstat command output what must you do to resolve the connectivity issue?

Reinstall collector agent and use port 443

Reinstall collector agent and use port 8081

Reinstall collector agent and use port 555

Reinstall collector agent and use port 6514

NEW QUESTION 20
Refer to the exhibit.

Based on the postman output shown in the exhibit why is the user getting an unauthorized error?

The user has been assigned Admin and Rest API roles

FortiEDR requires a password reset the first time a user logs in

Postman cannot reach the central manager

API access is disabled on the central manager

NEW QUESTION 21
How does FortiEDR implement post-infection protection?

By preventing data exfiltration or encryption even after a breach occurs

By using methods used by traditional EDR

By insurance against ransomware

By real-time filtering to prevent malware from executing

NEW QUESTION 22
An administrator needs to restrict access to the ADMINISTRATION tab inthe central manager for a specific account.
What role should the administrator assign to this account?

Admin

User

Local Admin

REST API

NEW QUESTION 23
Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)