Fortinet
FCP_FAZ_AN-7.4 · Question #32
Which log will generate an event with the status Contained?
The correct answer is A. An AV log with action=quarantine. Contained: The risk source is isolated. For example, an AV log with action=quarantine will have the event status Contained.
Alerting and Incident Response
Question
Which log will generate an event with the status Contained?
Options
- AAn AV log with action=quarantine.
- BAn IPS log with action=pass.
- CA WebFilter log will action=dropped.
- DAn AppControl log with action=blocked.
How the community answered
(58 responses)- A81% (47)
- B10% (6)
- C5% (3)
- D3% (2)
Explanation
Contained: The risk source is isolated. For example, an AV log with action=quarantine will have the event status Contained.
Topics
#event status#AV log#quarantine action#contained status
Community Discussion
No community discussion yet for this question.