Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

  1. Home
  2. Fortinet
  3. NSE 5 Network Security Analyst
  4. NSE5_EDR-5.0
  5. Fortinet NSE 5 - FortiEDR 5.0 Exam Questions and Answers

NSE5_EDR-5.0 Fortinet NSE 5 - FortiEDR 5.0 Exam Questions and Answers

Questions 4

Refer to the exhibit.

NSE5_EDR-5.0 Question 4

Based on the threat hunting query shown in the exhibit which of the following is true?

Options:

A.

RDP connections will be blocked and classified as suspicious

B.

A security event will be triggered when the device attempts a RDP connection

C.

This query is included in other organizations

D.

The query will only check for network category

Buy Now
Questions 5

Refer to the exhibit.

NSE5_EDR-5.0 Question 5

Based on the postman output shown in the exhibit why is the user getting an unauthorized error?

Options:

A.

The user has been assigned Admin and Rest API roles

B.

FortiEDR requires a password reset the first time a user logs in

C.

Postman cannot reach the central manager

D.

API access is disabled on the central manager

Buy Now
Questions 6

Refer to the exhibit.

NSE5_EDR-5.0 Question 6

Based on the event exception shown in the exhibit which two statements about the exception are true? (Choose two)

Options:

A.

A partial exception is applied to this event

B.

FCS playbooks is enabled by Fortinet support

C.

The exception is applied only on device C8092231196

D.

The system owner can modify the trigger rules parameters

Buy Now
Questions 7

Which connectors can you use for the FortiEDR automated incident response? (Choose two.)

Options:

A.

FortiNAC

B.

FortiGate

C.

FortiSiem

D.

FortiSandbox

Buy Now
Questions 8

Refer to the exhibit.

NSE5_EDR-5.0 Question 8

Based on the FortiEDR status output shown in the exhibit, which two statements about the FortiEDR collector are true? (Choose two.)

Options:

A.

The collector device has windows firewall enabled

B.

The collector has been installed with an incorrect port number

C.

The collector has been installed with an incorrect registration password

D.

The collector device cannot reach the central manager

Buy Now
Questions 9

Exhibit.

NSE5_EDR-5.0 Question 9

Based on the event shown in the exhibit which two statements about the event are true? (Choose two.)

Options:

A.

The device is moved to isolation.

B.

Playbooks is configured for this event.

C.

The event has been blocked

D.

The policy is in simulation mode

Buy Now
Exam Code: NSE5_EDR-5.0
Exam Name: Fortinet NSE 5 - FortiEDR 5.0 Exam
Last Update: May 18, 2026
Questions: 30

PDF + Testing Engine

$64.99   $185.69
buy now NSE5_EDR-5.0 pdf + testing engine

Testing Engine

$49.99   $142.83
buy now NSE5_EDR-5.0 testing engine

PDF (Q&A)

$54.99   $157.11
buy now NSE5_EDR-5.0 pdf