QUESTION: 9

Refer to the exhibits.

The exhibits show application policy logs and application details. Collector C8092231196 is a member of the Finance group. What must an administrator do to block the FileZilia application?

Deny application in Finance policy
Assign Finance policy to DBA group
Assign Finance policy to Default Collector Group
Assign Simulation Communication Control Policy to DBA group

Answer(s): A

Reveal Solution Next Question

QUESTION: 10

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

RDP connections will be blocked and classified as suspicious
A security event will be triggered when the device attempts a RDP connection
This query is included in other organizations
The query will only check for network category

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

FortiNAC
FortiGate
FortiSiem
FortiSandbox

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 12

What is true about classifications assigned by Fortinet Cloud Service (FCS)?

FCS revises the classification of the core based on its database.
The core only assigns a classification if FCS is not available.
FCS is responsible for all classifications.
The core is responsible for all classifications if FCS playbooks are disabled.

Answer(s): C

Reference:

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiGate_Cloud.pdf

Reveal Solution Next Question

Free NSE5_EDR-5.0 Exam Braindumps (page: 4)

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

Reference:

Exam Discussions & Posts