NSE6-OTS-AR-7-6: NSE 6 - OT Security 7.6 ArchitectDemo

By Fortinet · Question Mode

QuestionQ14

Monitoring and risk assessment

Refer to the exhibits.

Question Image

Question Image

A partial Basic Event Handler page on FortiAnalyzer and the creation of a trigger on a FortiGate device are displayed.

To strengthen protection for your OT network, you want to automate handling of compromised devices reported through FortiAnalyzer.

You configured an event handler as shown. When creating the trigger on the FortiGate device, the Event handler name field does not list the Alert_trigger option.

Which two actions must you take to make Alert_trigger available?

Choose two
  • A You must click + Create in the Event handler name field.
  • B You must authorize the FortiGate device on FortiAnalyzer.
  • C You must configure the FortiAnalyzer setting on the FortiGate device.
  • D You must configure the trigger on the root FortiGate.
Explanation

A FortiGate must have FortiAnalyzer logging configured and be authorized on FortiAnalyzer before FortiAnalyzer event handlers can be made available to its automation framework. Once the connection is configured and the FortiGate is authorized, an enabled event handler with Automation Stitch enabled can be selected as the trigger’s event-handler name.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!