NSE5_EDR-5.0 Free Practice Test

A FortiEDR security event is causing a performance issue with a third-parry application. What must you do first about the event?

1. A. Contact Fortinet support
2. B. Terminate the process and uninstall the third-party application
3. C. Immediately create an exception
4. D. Investigate the event to verify whether or not the application is safe

Correct Answer: C

Which threat hunting profile is the most resource intensive?

1. A. Comprehensive
2. B. Inventory
3. C. Default
4. D. Standard Collection

Correct Answer: A

Which scripting language is supported by the FortiEDR action managed?

1. A. TCL
2. B. Python
3. C. Perl
4. D. Bash

Correct Answer: A

A company requires a global communication policy for a FortiEDR multi-tenant environment. How can the administrator achieve this?

1. A. An administrator creates a new communication control policy and shares it with other organizations
2. B. A local administrator creates new a communication control policy and shares it with other organizations
3. C. A local administrator creates a new communication control policy and assigns it globally to all organizations
4. D. An administrator creates a new communication control policy for each organization

Correct Answer: C

Refer to the exhibit.

Based on the FortiEDR status output shown in the exhibit, which two statements about the FortiEDR collector are true? (Choose two.)

1. A. The collector device has windows firewall enabled
2. B. The collector has been installed with an incorrect port number
3. C. The collector has been installed with an incorrect registration password
4. D. The collector device cannot reach the central manager

Correct Answer: BD