Fortinet FCP - FortiSIEM 7.2 Analyst FCP_FSM_AN-7.2 Question # 4 Topic 1 Discussion

Fortinet FCP - FortiSIEM 7.2 Analyst FCP_FSM_AN-7.2 Question # 4 Topic 1 Discussion

FCP_FSM_AN-7.2 Exam Topic 1 Question 4 Discussion:
Question #: 4
Topic #: 1

How does FortiSIEM update the incident table if a performance rule triggers repeatedly?


A.

FortiSIEM changes the incident status to Repeated, and updates the Last Seen timestamp.


B.

FortiSIEM updates the Incident Count value and Last Seen timestamp.


C.

FortiSIEM generates a new incident based on the Rule Frequency value, and updates the First Seen and Last Seen timestamps.


D.

FortiSIEM generates a new incident each time the rule triggers, and updates the First Seen and Last Seen timestamps.


Get Premium FCP_FSM_AN-7.2 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.