ExamGecko
Search Search Login
Home Home / Fortinet / NSE7_ADA-6.3
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

What is Tactic in the MITRE ATT&CK framework?
Which two statements about the maximum device limit on FortiSIEM are true? (Choose two.)
On which disk are the SQLite databases that are used for the baselining stored?
Identify the processes associated with Machine Learning/Al on FortiSIEM. (Choose two.)
Refer to the exhibit. The rule evaluates multiple VPN logon failures within a ten-minute window. Consider the following VPN failure events received within a ten-minute window: How many incidents are generated?
Which statement about EPS bursting is true?
Which three processes are collector processes? (Choose three.)
Refer to the exhibit. Which statement about the rule filters events shown in the exhibit is true?
Which three statements about phRuleMaster are true? (Choose three.)
Refer to the exhibit. An administrator deploys a new collector for the first time, and notices that all the processes except the phMonitor are down. How can the administrator bring the processes up?

Question 12 - NSE7_ADA-6.3 discussion

Report
Export

What is the disadvantage of automatic remediation?

A.
It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
Answers
A.
It can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network.
B.
It is equivalent to running an IPS in monitor-only mode --- watches but does not block.
Answers
B.
It is equivalent to running an IPS in monitor-only mode --- watches but does not block.
C.
External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
Answers
C.
External threats or attacks detected by FortiSIEM will need user interaction to take action on an already overworked SOC team.
D.
Threat behaviors occurring during the night could take hours to respond to.
Answers
D.
Threat behaviors occurring during the night could take hours to respond to.
Suggested answer: A

Explanation:

The disadvantage of automatic remediation is that it can make a disruptive change to a user, block access to an application, or disconnect critical systems from the network. Automatic remediation can have unintended consequences if not carefully planned and tested. Therefore, it is recommended to use manual or semi-automatic remediation for sensitive or critical systems.

Reference:Fortinet NSE 7 - Advanced Analytics 6.3 Exam Description, page 15

Show Answer
asked 18/09/2024
Gregory Destrebecq
27 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms