FCSS_ADA_AR-6.7 · Question #44
What is the disadvantage of automatic remediation?
The correct answer is A. It can make a disruptive change to a user, block access to an application, or disconnect critical. Automatic remediation in FortiSIEM enables real-time response to security threats without manual intervention. While this can improve response times, it also introduces risks because actions are taken automatically based on predefined rules, without human verification…
Question
What is the disadvantage of automatic remediation?
Options
- AIt can make a disruptive change to a user, block access to an application, or disconnect critical
- BExternal threats or attacks detected by FortiSIEM will need user interaction to take action on an
- CIt is equivalent to running an IPS in monitor-only mode-watches but does not block.
- DThreat behavior occurring during the night could take hours to respond to.
How the community answered
(26 responses)- A92% (24)
- C4% (1)
- D4% (1)
Explanation
Automatic remediation in FortiSIEM enables real-time response to security threats without manual intervention. While this can improve response times, it also introduces risks because actions are taken automatically based on predefined rules, without human verification. Automated responses could mistakenly block legitimate users from critical systems or applications. Misconfigured rules might disconnect essential systems, causing business disruptions. If an incident is a false positive, automatic remediation may interfere with normal operations
Topics
Community Discussion
No community discussion yet for this question.