NSE6-OTS-AR-7-6: NSE 6 - OT Security 7.6 ArchitectDemo

By Fortinet · Question Mode

QuestionQ21

Monitoring and risk assessment

See the exhibit.

Question Image

You configured event handlers on FortiAnalyzer to monitor your OT network. Based on the partial Event Monitor page displayed in the exhibit, which statement is correct?

  • A The corresponding IPS log has a block or drop action.
  • B The Web.Client event is contained.
  • C The Web.Client event is unhandled.
  • D The corresponding IPS log has a quarantine action.
Explanation

For IPS events, FortiAnalyzer assigns the Mitigated status when the associated IPS log action is block or drop. A quarantine action corresponds to Contained, not Mitigated.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!