Exam NSE5_EDR-5.0 topic 1 question 14 discussion

Actual exam question from Fortinet's NSE5_EDR-5.0

Question #: 14
Topic #: 1

What is the benefit of using file hash along with the file name in a threat hunting repository search?

A. It helps to check the malware even if the malware variant uses a different file name.
B. It helps to make sure the hash is really a malware.
C. It helps to find if some instances of the hash are actually associated with a different file.
D. It helps locate a file as threat hunting only allows hash search.

Show Suggested Answer

Suggested Answer: A 🗳️

by hugojt at March 16, 2023, 6:20 p.m.

Submit Cancel

4 months, 3 weeks ago

A is the Correct answer

upvoted 1 times

...

1 year, 4 months ago

Selected Answer: A

I think is A.

upvoted 3 times

...

1 year, 10 months ago

It should be the C

upvoted 3 times

1 year, 6 months ago

why option c ?

upvoted 2 times

...

Most Voted

Loading ...