NSE7_SOC_AR-7.6 Question #26: Real Exam Question with Answer & Explanation

The correct answer is B. Manually, on the Event Monitor page D. Using a custom event handler. Using a custom event handler: You can configure an event handler to "Automatically Create Incident" whenever its rule conditions are met. Manually, on the Event Monitor page: Analysts can select any event in the Event Monitor and click "Create Incident" to make a new incident by

Question

Which two ways can you create an incident on FortiAnalyzer? (Choose two.)

Options

AUsing a connector action
BManually, on the Event Monitor page
CBy running a playbook
DUsing a custom event handler

Explanation

Using a custom event handler: You can configure an event handler to "Automatically Create Incident" whenever its rule conditions are met. Manually, on the Event Monitor page: Analysts can select any event in the Event Monitor and click "Create Incident" to make a new incident by hand.

Community Discussion

No community discussion yet for this question.

Full NSE7_SOC_AR-7.6 Practice