Fortinet NSE5_EDR-5.0問題集で100%カバー率リアル試験問題（更新された30問あります)
リアルNSE5_EDR-5.0問題集でリアルFortinet問題集PDF
質問 # 17
Refer to the exhibit.
Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)
- A. The activity event is associated with the file action
- B. There are no MITRE details available for this event
- C. The user fortinet has executed a ping command
- D. The PING EXE process was blocked
正解：B、D
質問 # 18
What is the role of a collector in the communication control policy?
- A. A collector records applications that communicate externally
- B. A collector can quarantine unsafe applications from communicating
- C. A collector blocks unsafe applications from running
- D. A collector is used to change the reputation score of any application that collector runs
正解：C
質問 # 19
A company requires a global communication policy for a FortiEDR multi-tenant environment.
How can the administrator achieve this?
- A. A local administrator creates new a communication control policy and shares it with other organizations
- B. A local administrator creates a new communication control policy and assigns it globally to all organizations
- C. An administrator creates a new communication control policy for each organization
- D. An administrator creates a new communication control policy and shares it with other organizations
正解：B
質問 # 20
Refer to the exhibit.
Based on the FortiEDR status output shown in the exhibit, which two statements about the FortiEDR collector are true? (Choose two.)
- A. The collector has been installed with an incorrect port number
- B. The collector device cannot reach the central manager
- C. The collector device has windows firewall enabled
- D. The collector has been installed with an incorrect registration password
正解：A、B
質問 # 21
Refer to the exhibit.
Based on the postman output shown in the exhibit why is the user getting an unauthorized error?
- A. API access is disabled on the central manager
- B. FortiEDR requires a password reset the first time a user logs in
- C. The user has been assigned Admin and Rest API roles
- D. Postman cannot reach the central manager
正解：C
質問 # 22
Which scripting language is supported by the FortiEDR action managed?
- A. Perl
- B. Python
- C. TCL
- D. Bash
正解：C
質問 # 23
Which two types of remote authentication does the FortiEDR management console support? (Choose two.)
- A. Radius
- B. LDAP
- C. TACACS
- D. SAML
正解：A、B
質問 # 24
What is true about classifications assigned by Fortinet Cloud Sen/ice (FCS)?
- A. The core only assigns a classification if FCS is not available
- B. FCS revises the classification of the core based on its database
- C. FCS is responsible for all classifications
- D. The core is responsible for all classifications if FCS playbooks are disabled
正解：B
質問 # 25
Which two statements about the FortiEDR solution are true? (Choose two.)
- A. It provides pre-infection and post-infection protection
- B. It provides pant-to-point protection
- C. It provides central management
- D. It is Windows OS only
正解：A、B
質問 # 26
How does FortiEDR implement post-infection protection?
- A. By using methods used by traditional EDR
- B. By preventing data exfiltration or encryption even after a breach occurs
- C. By insurance against ransomware
- D. By real-time filtering to prevent malware from executing
正解：D
質問 # 27
Refer to the exhibit.
Based on the event exception shown in the exhibit which two statements about the exception are true? (Choose two)
- A. A partial exception is applied to this event
- B. The exception is applied only on device C8092231196
- C. FCS playbooks is enabled by Fortinet support
- D. The system owner can modify the trigger rules parameters
正解：A、B
質問 # 28
Exhibit.
Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)
- A. Device C8092231196 has been isolated
- B. The event was blocked because the certificate is unsigned
- C. The device cannot be remediated
- D. The execution prevention policy has blocked this event.
正解：A、B
質問 # 29
......
実際にあるFast2test NSE5_EDR-5.0問題集PDFで100%合格率 保証付き：https://jp.fast2test.com/NSE5_EDR-5.0-premium-file.html
無料Fortinet NSE5_EDR-5.0試験問題と解答：https://drive.google.com/open?id=1Qfz3L0vSP8vwQvzbJLH3dKEFcLP8_aUI