Fortinet
FCP_FAZ_AN-7.6 · Question #72
When managing incidents on FortiAnalyzer, which fact must an analyst be aware of?
The correct answer is B. A playbook can be run from the Incidents page. FortiAnalyzer allows analysts to run playbooks directly from the Incidents page, enabling immediate automated response actions on the selected incident.
Alerting and Incident Response
Question
When managing incidents on FortiAnalyzer, which fact must an analyst be aware of?
Options
- AThe status of the incident is always linked to the status of the attached event.
- BA playbook can be run from the Incidents page.
- CIncidents must be acknowledged before they can be analyzed.
- DIndicators found on the Incidents page can be enriched only from the Indicators page.
How the community answered
(26 responses)- B88% (23)
- C8% (2)
- D4% (1)
Explanation
FortiAnalyzer allows analysts to run playbooks directly from the Incidents page, enabling immediate automated response actions on the selected incident.
Topics
#incident management#playbooks#incidents page#FortiAnalyzer
Community Discussion
No community discussion yet for this question.