When managing incidents on FortiAnlyzer, what must an analyst be aware of?

The correct answer is A. You can manually attach generated reports to incidents. You can attach reports to incidents to add historical data in addition to real-time events. These are the three ways that you can attach a report: - Manually, from an existing report - Manually, from an existing incident - Automatically, through automation playbooks

SOC Features (Playbooks, Incident Response)

Question

Options

AYou can manually attach generated reports to incidents.
BThe status of the incident is always linked to the status of the attach event.
CSeverity incidents rated with the level High have an initial service-level agreement (SLA) response
DIncidents must be acknowledged before they can be analyzed.

How the community answered

(33 responses)

A
73% (24)
B
9% (3)
C
3% (1)
D
15% (5)

Explanation

You can attach reports to incidents to add historical data in addition to real-time events. These are the three ways that you can attach a report: - Manually, from an existing report - Manually, from an existing incident - Automatically, through automation playbooks

Topics

#incident management#report attachment#SOC workflow#analyst tasks

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.4 Practice