FCSS_LED_AR-7.6 · Question #57
In addition to requiring a FortiAnalyzer device to configure the Security Fabric, which license must be added to FortiAnalyzer to use Indicators of Compromise (IOC) rules?
The correct answer is D. Threat Detection Service license. FortiAnalyzer requires a specific license to evaluateIndicators of Compromise (IOC). From theFortiAnalyzer 7.4.1 Administration Guide: IOC identification requires theThreat Detection Servicelicense on FortiAnalyzer. This license enables: IOC database updates Compromised host…
Question
In addition to requiring a FortiAnalyzer device to configure the Security Fabric, which license must be added to FortiAnalyzer to use Indicators of Compromise (IOC) rules?
Options
- AloT Security Add-on license
- BIOC Subscription license
- CIOC detection is included on FAZ-Basic license
- DThreat Detection Service license
How the community answered
(28 responses)- B4% (1)
- C4% (1)
- D93% (26)
Explanation
FortiAnalyzer requires a specific license to evaluateIndicators of Compromise (IOC). From theFortiAnalyzer 7.4.1 Administration Guide: IOC identification requires theThreat Detection Servicelicense on FortiAnalyzer. This license enables: IOC database updates Compromised host detection Event correlation based on FortiGuard threat intelligence Fabric-wide IOC automation triggers
Topics
Community Discussion
No community discussion yet for this question.