Refer to the exhibits. The DOS attack playbook is configured to create an incident when an event handler generates a denial-of-ser/ice (DoS) attack event. Why did the DOS attack playbook fail to…

The correct answer is A. The Create SMTP Enumeration incident task is expecting an integer value but is receiving the. The raw log shows a ValueError: invalid literal for int() in the incident operator when running the Create Incident step ("Create SMTP Enumeration incident"), indicating it tried to cast the IP string "10.200.200.100" to an integer and failed.

FortiAnalyzer for SOC

Question

Refer to the exhibits. The DOS attack playbook is configured to create an incident when an event handler generates a denial-of-ser/ice (DoS) attack event. Why did the DOS attack playbook fail to execute?

Exhibit

Options

AThe Create SMTP Enumeration incident task is expecting an integer value but is receiving the
BThe Get Events task is configured to execute in the incorrect order.
CThe Attach_Data_To_lncident task failed.
DThe Attach_Data_To_lncident task is expecting an integer value but is receiving the incorrect

How the community answered

(19 responses)

A
63% (12)
B
21% (4)
C
11% (2)
D
5% (1)

Explanation

The raw log shows a ValueError: invalid literal for int() in the incident operator when running the Create Incident step ("Create SMTP Enumeration incident"), indicating it tried to cast the IP string "10.200.200.100" to an integer and failed.

Topics

#playbook debugging#task failure#data type mismatch#incident creation

Community Discussion

No community discussion yet for this question.

Full NSE7_SOC_AR-7.6 Practice