NSE5_EDR-5.0別格な問題集をダウンロードして無料で最新の（NSE5_EDR-5.0テスト問題集をゲット) [Q14-Q31]

NSE5_EDR-5.0別格な問題集をダウンロードして無料で最新の（NSE5_EDR-5.0テスト問題集をゲット2023年11月14日)

NSE5_EDR-5.0問題集は合格保証します合格できるNSE5_EDR-5.0試験問題2023年更新

フォーティネットNSE5_EDR-5.0の認定プログラムは、エンドポイントセキュリティソリューションの知識やスキルを向上するために設計されています。認定プログラムには、学習ガイド、練習問題、その他のリソースなど包括的なトレーニング資材が提供され、試験の準備を支援します。認定プログラムはまた、フォーティEDR 5.0の展開と管理の実践的な経験を積むことができる実習を提供しています。

質問 # 14
Exhibit.

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

A. The device is moved to isolation.
B. Playbooks is configured for this event.
C. The policy is in simulation mode
D. The event has been blocked

正解：B、C

質問 # 15
What is the purpose of the Threat Hunting feature?

A. Identify all instances of a known malicious file or hash and notify affected users
B. Find and delete all instances ofa known malicious file or hash inthe organization
C. Delete any file from any collector in the organization
D. Execute playbooks to isolate affected collectors in the organization

正解：A

質問 # 16
An administrator needs to restrict access to the ADMINISTRATION tab inthe central manager for a specific account.
What role should the administrator assign to this account?

A. Admin
B. User
C. Local Admin
D. REST API

正解：C

質問 # 17
Which scripting language is supported by the FortiEDR action managed?

A. Perl
B. Python
C. TCL
D. Bash

正解：C

質問 # 18
Which two statements about the FortiEDR solution are true? (Choose two.)

A. It is Windows OS only
B. It provides central management
C. It provides pre-infection and post-infection protection
D. It provides pant-to-point protection

正解：C、D

質問 # 19
How does FortiEDR implement post-infection protection?

A. By using methods used by traditional EDR
B. By real-time filtering to prevent malware from executing
C. By insurance against ransomware
D. By preventing data exfiltration or encryption even after a breach occurs

正解：B

質問 # 20
Which two statements are true about the remediation function in the threat hunting module? (Choose two.)

A. The file is quarantined
B. The file is removed from the affected collectors
C. The threat hunting module deletes files from collectors that are currently online.
D. The threat hunting module sends the user a notification to delete the file

正解：A、D

質問 # 21
Refer to the exhibit.

Based on the event shown in the exhibit, which two statements about the event are true? (Choose two.)

A. The user was able to launch TestApplication exe
B. The NGAV policy has blocked TestApplication exe
C. FCS classified the event as malicious
D. TestApplication exe is sophisticated malware

正解：B、D

質問 # 22
Which security policy has all of its rules disabled by default?

A. Device Control
B. Ransomware Prevention
C. Exfiltration Prevention
D. Execution Prevention

正解：B

質問 # 23
Refer to the exhibit.

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true?
(Choose two.)

A. The PING EXE process was blocked
B. There are no MITRE details available for this event
C. The activity event is associated with the file action
D. The user fortinet has executed a ping command

正解：A、B

質問 # 24
What is the benefit of using file hash along with the file name in a threat hunting repository search?

A. It helps to find if some instances of the hash are actually associated with a different file
B. It helps to check the malware even if the malware variant uses a different file name
C. It helps locate a file as threat hunting only allows hash search
D. It helps to make sure the hash is really a malware

正解：A

質問 # 25
Exhibit.

Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)