Fortinet
NSE7_OTS-7.2 · Question #3
NSE7_OTS-7.2 Question #3: Real Exam Question with Answer & Explanation
Sign in or unlock NSE7_OTS-7.2 to reveal the answer and full explanation for question #3. The question stem and answer options stay visible for context.
Question
An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM. Which step must the administrator take to achieve this task?
Options
- AConfigure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
- BCreate a notification policy and define a script/remediation on FortiSIEM.
- CDefine a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
- DDeploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.
Unlock NSE7_OTS-7.2 to see the answer
You've previewed enough free NSE7_OTS-7.2 questions. Unlock NSE7_OTS-7.2 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.