If an incident's status is Cleared, what does this mean?

The correct answer is B. A clear condition set on a rule was satisfied. Incident Status in FortiSIEM: The status of an incident indicates its current state and helps administrators track and manage incidents effectively. Cleared Status: When an incident's status is "Cleared," it means that a specific condition set to clear the incident has been…

Incident management

Question

Options

ATwo hours have passed since the incident occurred and the incident has not reoccurred.
BA clear condition set on a rule was satisfied.
CA security rule issue has been resolved.
DThe incident was cleared by an operator.

How the community answered

(26 responses)

A
4% (1)
B
73% (19)
C
15% (4)
D
8% (2)

Explanation

Incident Status in FortiSIEM: The status of an incident indicates its current state and helps administrators track and manage incidents effectively. Cleared Status: When an incident's status is "Cleared," it means that a specific condition set to clear the incident has been satisfied. Clear Condition: This is typically a predefined condition that indicates the issue causing the incident has been resolved or no longer exists. Automatic vs. Manual Clearance: While some incidents may be cleared automatically based on clear conditions, others might be manually cleared by an operator.

Topics

#incident status#cleared status#rule clear condition#incident lifecycle

Community Discussion

No community discussion yet for this question.

Full NSE5_FSM-6.3 Practice