ExamGecko
Question list
Search
Search

Question 17 - NSE7_ADA-6.3 discussion

Report
Export

Refer to the exhibit.

An administrator wants to remediate the incident from FortiSIEM shown in the exhibit.

What option is available to the administrator?

A.
Quarantine IP FortiClient
Answers
A.
Quarantine IP FortiClient
B.
Run the block MAC FortiOS.
Answers
B.
Run the block MAC FortiOS.
C.
Run the block IP FortiOS 5.4
Answers
C.
Run the block IP FortiOS 5.4
D.
Run the block domain Windows DNS
Answers
D.
Run the block domain Windows DNS
Suggested answer: C

Explanation:

The incident from FortiSIEM shown in the exhibit is a brute force attack on a FortiGate device. The remediation option available to the administrator is to run the block IP FortiOS 5.4 action, which will block the source IP address of the attacker on the FortiGate device using a firewall policy.

asked 18/09/2024
ALEXANDRE NGUYEN
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first