NSE5_EDR-5.0 Sample Questions Answers

The collector device has windows firewall enabled

The collector has been installed with an incorrect port number

The collector has been installed with an incorrect registration password

The collector device cannot reach the central manager

The core is responsible for all classifications if FCS playbooks are disabled

The core only assigns a classification if FCS is not available

FCS revises the classification of the core based on its database

FCS is responsible for all classifications

FortiNAC

FortiGate

FortiSiem

FortiSandbox

The NGAV policy has blocked TestApplication exe

TestApplication exe is sophisticated malware

The user was able to launch TestApplication exe

FCS classified the event as malicious

Playbooks

Security Policies

Forensic

Communication Control

RDP connections will be blocked and classified as suspicious

A security event will be triggered when the device attempts a RDP connection

This query is included in other organizations

The query will only check for network category