Logo ExamsQA
Exit
Official Bank 0/30

Fortinet NSE 5 – FortiEDR 5.0 (NSE5_EDR-5.0) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
30 Total Questions
1
Question
Refer to the exhibit.

Exhibit

two.) Based on the event shown in the exhibit, which two statements about the event are true? (Choose
Select 2
Options
A FCS classified the event as malicious
B The NGAV policy has blocked TestApplication exe
C The user was able to launch TestApplication exe
D TestApplication exe is sophisticated malware
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which FortiEDR component is required to find malicious files on the entire network of an organization?
Options
A FortiEDR Core
B FortiEDR Aggregator
C FortiEDR Threat Hunting Repository
D FortiEDR Central Manager
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which security policy has all of its rules disabled by default?
Options
A Exfiltration Prevention
B Device Control
C Execution Prevention
D Ransomware Prevention
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Refer to the exhibit.

Exhibit

Based on the threat hunting event details shown in the exhibit, which two statements about the event are true? (Choose two.)
Select 2
Options
A There are no MITRE details available for this event
B The PING EXE process was blocked
C The activity event is associated with the file action
D The user fortinet has executed a ping command
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
What is the purpose of the Threat Hunting feature?
Options
A Execute playbooks to isolate affected collectors in the organization
B Delete any file from any collector in the organization
C Identify all instances of a known malicious file or hash and notify affected users
D Find and delete all instances of a known malicious file or hash in the organization
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.