QUESTION: 17

Refer to the exhibit.

Based on the forensics data shown in the exhibit, which two statements are true? (Choose two.)

An exception has been created for this event
The forensics data is displayed m the stacks view
The device has been isolated
The exfiltration prevention policy has blocked this event

Answer(s): A,B

QUESTION: 18

The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

Playbook actions applied to inconclusive events
Playbook actions applied to handled events
Playbook actions applied to suspicious events
Playbook actions applied to malicious events

Answer(s): D

Reference:

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-FortiAuthenticator-radius-profile-assignment-based/ta-p/196684?externalID=FD46788

Reveal Solution Next Question

QUESTION: 19

Which threat hunting profile is the most resource intensive?

Comprehensive
Inventory
Default
Standard Collection

Answer(s): A

Reveal Solution Next Question

QUESTION: 20

Which two types of remote authentication does the FortiEDR management console support?
Choose two.)

Radius
SAML
TACACS
LDAP

Answer(s): A,C

Reveal Solution Next Question

Free NSE5_EDR-5.0 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

Reference:

QUESTION: 19

QUESTION: 20