Question 1

Exhibit.

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

Options :

A : The device is moved to isolation.

B : Playbooks is configured for this event.

C : The event has been blocked

D : The policy is in simulation mode

Answer: B,D

Question 2

Which scripting language is supported by the FortiEDR action managed?

Options :

A : TCL

B : Python

C : Perl

D : Bash

Answer: A

Question 3

Refer to the exhibits.

The exhibits show application policy logs and application details Collector C8092231196 is a member of the

Finance group

What must an administrator do to block the FileZilia application?

Options :

A :

Deny application in Finance policy

B :

Assign Finance policy to DBA group

C : Assign Finance policy to Default Collector Group

D : Assign Simulation Communication Control Policy to DBA group

Answer: D

Higher Test Marks with Free Online NSE5_EDR-5.0 Exam Practice