Free NSE5_EDR-5.0 Sample Questions — Fortinet NSE 5 - FortiEDR 5.0

An administrator needs to restrict access to the ADMINISTRATION tab in the central manager for a specific account. What role should the administrator assign to this account?

• A. User
• B. Admin
• C. Local Admin
• D. REST API

FortiXDR relies on which feature as part of its automated extended response?

• A. Security Policies
• B. Forensic
• C. Playbooks
• D. Communication Control

How does FortiEDR implement post-infection protection?

• A. By insurance against ransomware
• B. By preventing data exfiltration or encryption even after a breach occurs
• C. By real-time filtering to prevent malware from executing
• D. By using methods used by traditional EDR

Which two criteria are requirements of integrating FortiEDR into the Fortinet Security Fabric? (Choose two.)

• A. Core with Core only functionality
• B. Forensics add-on license
• C. Central Manager connected to FCS
• D. valid API user with access to connectors

What is true about classifications assigned by Fortinet Cloud Service (FCS)?

• A. FCS revises the classification of the core based on its database
• B. The core only assigns a classification if FCS is not available
• C. FCS is responsible for all classifications
• D. The core is responsible for all classifications if FCS playbooks are disabled