NSE 5 – FortiEDR 5.0 — Question 22

A FortiEDR security event is causing a performance issue with a third-party application.
What must you do first about the event?

Answer options

• A. Investigate the event to verify whether or not the application is safe
• B. Contact Fortinet support
• C. Terminate the process and uninstall the third-party application
• D. Immediately create an exception

Correct answer: A

Explanation

The first action should be to investigate the event to determine if the application poses a security risk. This step is crucial to ensure that any further actions, such as contacting support or creating an exception, are based on accurate information. The other options may lead to unnecessary disruptions or support requests without understanding the root cause of the issue.