Fortinet NSE 5 - FortiEDR 5.0 - NSE5_EDR-5.0 Exam Practice Test

A. It helps to make sure the hash is really a malware

B. It helps to check the malware even if the malware variant uses a different file name

C. It helps to find if some instances of the hash are actually associated with a different file

D. It helps locate a file as threat hunting only allows hash search

A. The activity event is associated with the file action

B. There are no MITRE details available for this event

C. The PING EXE process was blocked

D. The user fortinet has executed a ping command

A. The device is moved to isolation.

B. Playbooks is configured for this event.

C. The event has been blocked

D. The policy is in simulation mode