NSE5_EDR-5.0 試験問題を無料オンラインアクセス

What is the role of a collector in the communication control policy?

• A.A collector records applications that communicate externally
• B.A collector blocks unsafe applications from running
• C.A collector can quarantine unsafe applications from communicating
• D.A collector is used to change the reputation score of any application that collector runs

The FortiEDR axe classified an event as inconclusive, out a few seconds later FCS revised the classification to malicious. What playbook actions ate applied to the event?

• A.Playbook actions applied to suspicious events
• B.Playbook actions applied to inconclusive events
• C.Playbook actions applied to malicious events
• D.Playbook actions applied to handled events

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?

• A.This query is included in other organizations
• B.A security event will be triggered when the device attempts a RDP connection
• C.RDP connections will be blocked and classified as suspicious
• D.The query will only check for network category

Exhibit.

Based on the forensics data shown in the exhibit which two statements are true? (Choose two.)

• A.Device C8092231196 has been isolated
• B.The execution prevention policy has blocked this event.
• C.The event was blocked because the certificate is unsigned
• D.The device cannot be remediated