ExamGecko
Question list
Search
Search

Related questions











Question 18 - NSE7_OTS-7.2 discussion

Report
Export

An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.

Which step must the administrator take to achieve this task?

A.
Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
Answers
A.
Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
B.
Create a notification policy and define a script/remediation on FortiSIEM.
Answers
B.
Create a notification policy and define a script/remediation on FortiSIEM.
C.
Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
Answers
C.
Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
D.
Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.
Answers
D.
Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.
Suggested answer: B

Explanation:

https://fusecommunity.fortinet.com/blogs/silviu/2022/04/12/fortisiempublishingscript

asked 18/09/2024
Bogdan Karolic
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first