FCP_FAZ_AN-7.6 · Question #67
Refer to the exhibit. Which statement about the event displayed is correct?
The correct answer is C. Event handlers E. Playbooks F. Incident templates. The event status is shown as Mitigated, which in FortiAnalyzer indicates that the threat was handled automatically - in this case, the suspicious web request was blocked by the web filter. Which three modules does FortiAnalyzer automatically download content from with a valid…
Question
Refer to the exhibit. Which statement about the event displayed is correct?
Exhibit
Options
- AReport templates
- BDashboards
- CEvent handlers
- DActive Connectors
- EPlaybooks
- FIncident templates
How the community answered
(55 responses)- A13% (7)
- B7% (4)
- C78% (43)
- D2% (1)
Explanation
The event status is shown as Mitigated, which in FortiAnalyzer indicates that the threat was handled automatically - in this case, the suspicious web request was blocked by the web filter. Which three modules does FortiAnalyzer automatically download content from with a valid SOC Automation service license? (Choose three.) With a valid SOC Automation service license, FortiAnalyzer receives automatic updates for these specific content types: Event handlers: These define how FortiAnalyzer processes and responds to specific security Playbooks: These are automated workflows used to investigate and respond to security incidents. Incident templates: These provide predefined structures for classifying and managing security
Topics
Community Discussion
No community discussion yet for this question.