ExamGecko
Question list
Search
Search

Question 98 - NSE5_FAZ-7.2 discussion

Report
Export

You crested a playbook on FortiAnalyzer that uses a FortiOS connector When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?

A.
FortiAnalyzer Event Handler
Answers
A.
FortiAnalyzer Event Handler
B.
Incoming webhook
Answers
B.
Incoming webhook
C.
FortiOS Event Log
Answers
C.
FortiOS Event Log
D.
Fabric Connector event
Answers
D.
Fabric Connector event
Suggested answer: B

Explanation:

"One possible scenario is shown on the slide:

1. Traffic flows through the FortiGate

2. FortiGate sends logs to FortiAnalyzer

3. FortiAnalyzer detects some suspicious traffic and generates an event

4. The event triggers the execution of a playbook in FortiAnalyzer, which sends a webhook call to FortiGate so that it runs an automation stitch

5. FortiGate runs the automation stitch with the corrective or preventive actions" FortiAnalyzer_7.0_Study_Guide-Online page 228 In order to see the actions related to the FOS connector, you must enable an automation rule using the Incoming Webhook Call trigger on the FortiGate side. FortiAnalyzer_7.0_Study Guide page no 233

asked 18/09/2024
Mohit Mohit
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first