ExamGecko
Question list
Search
Search

List of questions

Search

Question 24 - FCP_FCT_AD-7.2 discussion

Report
Export

Which security fabric component sends a notification io quarantine an endpoint after IOC detection 'n the automation process?

A.
FortiAnalyzer
Answers
A.
FortiAnalyzer
B.
FortiGate
Answers
B.
FortiGate
C.
FortiClient EMS
Answers
C.
FortiClient EMS
D.
FortiClient
Answers
D.
FortiClient
Suggested answer: C

Explanation:

Understanding the Automation Process:

In the Security Fabric, automation processes can include actions such as quarantining an endpoint after an IOC (Indicator of Compromise) detection.

Evaluating Responsibilities:

FortiClient EMS plays a crucial role in endpoint management and can send notifications to quarantine endpoints.

Conclusion:

The correct security fabric component that sends a notification to quarantine an endpoint after IOC detection is FortiClient EMS.

FortiClient EMS and automation process documentation from the study guides.

asked 18/09/2024
Patricia Vontitte
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first