NSE5_EDR-5.0 Practice Test

NSE5_EDR-5.0 Practice Test practice questions, page 2 of 2, with answer review and explanations.

Question 6

Which security policy has all of its rules disabled by default?

  1. Exfiltration Prevention
  2. Execution Prevention
  3. Device Control
  4. Ransomware Prevention

Question 7

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

  1. The policy is in simulation mode.
  2. The device is moved to isolation.
  3. The event has been blocked.
  4. Playbooks is configured for this event.

Question 8

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

  1. FortiSandbox
  2. FortiSiem
  3. FortiNAC
  4. FortiGate