Which two ways can you create an incident on FortiAnalyzer? (Choose two.)

The correct answer is B. Manually, on the Event Monitor page D. Using a custom event handler. Using a custom event handler: You can configure an event handler to "Automatically Create Incident" whenever its rule conditions are met. Manually, on the Event Monitor page: Analysts can select any event in the Event Monitor and click "Create Incident" to make a new incident…

FortiAnalyzer for SOC

Question

Options

AUsing a connector action
BManually, on the Event Monitor page
CBy running a playbook
DUsing a custom event handler

How the community answered

(44 responses)

A
5% (2)
B
86% (38)
C
9% (4)

Explanation

Using a custom event handler: You can configure an event handler to "Automatically Create Incident" whenever its rule conditions are met. Manually, on the Event Monitor page: Analysts can select any event in the Event Monitor and click "Create Incident" to make a new incident by hand.

Topics

#incident creation#event handlers#Event Monitor#FortiAnalyzer incidents

Community Discussion

No community discussion yet for this question.

Full NSE7_SOC_AR-7.6 Practice