Fortinet
FCP_FAZ_AN-7.6 · Question #32
Which log will generate an event with the status Contained?
The correct answer is A. An AV log with action=quarantine. Contained: The risk source is isolated. For example, an AV log with action=quarantine will have the event status Contained.
Alerting and Incident Response
Question
Which log will generate an event with the status Contained?
Options
- AAn AV log with action=quarantine.
- BAn IPS log with action=pass.
- CA WebFilter log will action=dropped.
- DAn AppControl log with action=blocked.
How the community answered
(22 responses)- A82% (18)
- B9% (2)
- C5% (1)
- D5% (1)
Explanation
Contained: The risk source is isolated. For example, an AV log with action=quarantine will have the event status Contained.
Topics
#event status#Contained#AV log#quarantine action
Community Discussion
No community discussion yet for this question.