nerdexam
Fortinet

FCP_FAZ_AN-7.4 · Question #29

What is the purpose of using data selectors when configuring event handlers?

The correct answer is C. They apply their filter criteria to the entire event handler so that you don't have to configure the. When configuring event handlers on FortiAnalyzer, data selectors act as global filter criteria. These filters are applied at the event handler level, allowing all rules within that handler to inherit the same conditions. This avoids the need to repeatedly configure identical…

Alerting and Incident Response

Question

What is the purpose of using data selectors when configuring event handlers?

Options

  • AThey filter the types of logs that FortiAnalyzer can accept from registered devices.
  • BThey download new filters can be used in event handlers.
  • CThey apply their filter criteria to the entire event handler so that you don't have to configure the
  • DThey are common filters that can be applied simultaneously to all event handlers.

How the community answered

(49 responses)
  • A
    8% (4)
  • B
    4% (2)
  • C
    73% (36)
  • D
    14% (7)

Explanation

When configuring event handlers on FortiAnalyzer, data selectors act as global filter criteria. These filters are applied at the event handler level, allowing all rules within that handler to inherit the same conditions. This avoids the need to repeatedly configure identical filters for each individual rule.

Topics

#data selectors#event handlers#log filtering#common filters

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.4 Practice