Fortinet
FCSS_ADA_AR-6.7 · Question #8
Refer to the exhibit. Within what time window is the incident auto cleared?
The correct answer is B. Null. In the exhibit, the "Clear If" condition does not specify a condition for auto-clearing the incident. If an incident does not have a specific clear condition, it remains active until manually resolved or cleared by another process.
Advanced FortiSIEM Analytics
Question
Refer to the exhibit. Within what time window is the incident auto cleared?
Exhibit
Options
- A1800 seconds
- BNull
- C1 day
- D30 minutes
How the community answered
(48 responses)- A10% (5)
- B81% (39)
- C4% (2)
- D4% (2)
Explanation
In the exhibit, the "Clear If" condition does not specify a condition for auto-clearing the incident. If an incident does not have a specific clear condition, it remains active until manually resolved or cleared by another process.
Topics
#incident auto-clear#time window#null value#incident lifecycle
Community Discussion
No community discussion yet for this question.