Refer to the exhibit. Which statement is correct regarding the event displayed?

The correct answer is A. The security risk was blocked or dropped. Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not. The possible statuses are: Unhandled: The security event risk is not mitigated or contained, so it is considered open…

Event Management

Question

Exhibit

Options

AThe security risk was blocked or dropped.
BThe security event risk is considered open.
CAn incident was created from this event.
DThe risk source is isolated.

How the community answered

(48 responses)

A
75% (36)
B
15% (7)
C
2% (1)
D
8% (4)

Explanation

Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not. The possible statuses are: Unhandled: The security event risk is not mitigated or contained, so it is considered open. Contained: The risk source is isolated. Mitigated: The security risk is mitigated by being blocked or dropped. (Blank): Other scenarios.

Topics

#event status#security event#incident#blocked traffic

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-7.0 Practice