exam questions

Exam NSE5_EDR-5.0 All Questions

View all questions & answers for the NSE5_EDR-5.0 exam

Exam NSE5_EDR-5.0 topic 1 question 30 discussion

Actual exam question from Fortinet's NSE5_EDR-5.0
Question #: 30
Topic #: 1
[All NSE5_EDR-5.0 Questions]

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit, which of the following is true?

  • A. A security event will be triggered when the device attempts a RDP connection.
  • B. This query is included in other organizations.
  • C. The query will only check for network category.
  • D. RDP connections will be blocked and classified as suspicious.
Show Suggested Answer Hide Answer
Suggested Answer: D -
🗳️

Comments

Chosen Answer:
This is a voting comment. You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
thinasci01
4 months, 1 week ago
the correct answer is A.
upvoted 1 times
...
joeytrib
7 months, 3 weeks ago
Selected Answer: A
A : study guide p 178
upvoted 2 times
...
SGTSAS
8 months ago
A: True: See Study Guide page 178: You can schedule quieries to automate threat detection. If a query matches a threat in the defined schedule, an event appears in the EVENT VIEWER, and email abd syslog notifications are generated.
upvoted 2 times
...
thommy88
8 months, 1 week ago
Selected Answer: D
https://docs.fortinet.com/document/fortiedr/5.2.1/administration-guide/302208/filters "Classifications are initially determined by FortiEDR automatically or manually "
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
ITILFND V4
Budapest, 1 minute ago