NSE5_EDR-5.0 Practice Exam Questions with Answers Fortinet NSE 5 - FortiEDR 5.0 Exam Certification

The application is allowed in all communication control policies

The application is ignored as the reputation score is acceptable by the security policy

The application has not made any connection attempts

The application is blocked by the security policies

The device is moved to isolation.

Playbooks is configured for this event.

The event has been blocked

The policy is in simulation mode

FortiNAC

FortiGate

FortiSiem

FortiSandbox

It helps to make sure the hash is really a malware

It helps to check the malware even if the malware variant uses a different file name

It helps to find if some instances of the hash are actually associated with a different file

It helps locate a file as threat hunting only allows hash search