Fortinet Exam NSE5_FAZ-7.2 Topic 5 Question 29 Discussion

Actual exam question for Fortinet's NSE5_FAZ-7.2 exam

Question #: 29
Topic #: 5

What happens when the IOC breach detection engine on FortiAnalyzer finds web logs that match a blocklisted IP address?

AThe endpoint is marked as Compromised and. optionally, can be put in quarantine.

BFortiAnalyzer flags the associated host for further analysis.

CA new Infected entry is added for the corresponding endpoint.

DThe detection engine classifies those logs as Suspicious

Show Suggested Answer

Suggested Answer: A

by Ona at Sep 16, 2024, 02:55 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

7 days ago

Hmm, that makes sense too. It's important to analyze further before taking action.

upvoted 0 times

...

12 days ago

I disagree, I believe the correct answer is B) FortiAnalyzer flags the associated host for further analysis.

upvoted 0 times

...

25 days ago

I think the answer is A) The endpoint is marked as Compromised and, optionally, can be put in quarantine.

upvoted 0 times

...